[PowerShell每日技巧]调用ICACLS设置文件夹的安全属性(20140103)

DAIC

Console applications are equal citizens in the PowerShell ecosystem. In this example, a function uses icacls.exe to secure a newly created folder:

1. function New-Folder
   
2. {
   
3.     param
   
4.     (
   
5.         $Path,
   
6.         $Username
   
7.     )
   
8. 
   
9.     If ( (Test-Path -Path $path) -eq $false )
   
10.     {
    
11.         New-Item $path -Type Directory | Out-Null
    
12.     }
    
13. 
    
14.     icacls $path /inheritance:r /grant '*S-1-5-32-544:(OI)(CI)R' ('{0}:(OI)(CI)F' -f $username)
    
15. }

复制代码

The function New-Folder will create a new folder (if it does not exist) and then use icacls.exe to turn off inheritance and grant read permissions to the Administrators group and full permissions to the user specified.

http://powershell.com/cs/blogs/tips/archive/2014/01/03/using-icacls-to-secure-folders.aspx