Powershell - Folder Permissions

[FN-GM]

I have some code that works in giving a user full control of a folder in powershell this is below. How do i change this is its "Read & execute", "List folder contents" & "read" please?

 

Thanks

 

$Ar = New-Object system.security.accesscontrol.filesystemaccessrule($domuser,"FullControl","ContainerInherit, ObjectInherit","None","Allow")

[ascott2]

Not tested but this should do it

 

$folder_or_item = "C:\data\"

$acl = Get-Acl $folder_or_item

 

$rights =@("ReadAndExecute","Read","ListDirectory")

 

foreach($right in $rights){

$accessRule = New-Object System.Security.AccessControl.FileSystemAccessRule($domuser,$right,"ContainerInherit, ObjectInherit","None","Allow")

$acl.addaccessRule($accessrule)

}

Set-Acl $folder_or_item $acl

[pcstru]

I have some code that works in giving a user full control of a folder in powershell this is below. How do i change this is its "Read & execute", "List folder contents" & "read" please?

 

Thanks

 

$Ar = New-Object system.security.accesscontrol.filesystemaccessrule($domuser,"FullControl","ContainerInherit, ObjectInherit","None","Allow")

 

ascott2 I think has the gist. There's also a long list of rights attributes on technet.

[FN-GM]

So i dont have to add more lines i assume this would work? Thanks

 

$Ar = New-Object system.security.accesscontrol.filesystemaccessrule ($domuser,@("ReadAndExecute","Read","ListDirectory"),"ContainerInherit, ObjectInherit","None","Allow")

[ascott2]

So i dont have to add more lines i assume this would work? Thanks

 

$Ar = New-Object system.security.accesscontrol.filesystemaccessrule ($domuser,@("ReadAndExecute","Read","ListDirectory"),"ContainerInherit, ObjectInherit","None","Allow")

 

Unfortunately you can't add an array to filesystemaccessrule as it is only expecting a string( well technically a fileaccess object) so you need to add each permission type individually, that was why I had used a loop in my example.