Scripting Blog

A place to learn about PowerShell and share stories of automation

DACLS and SACLS - Scripting Blog

Use PowerShell to Convert SDDL to Binary Format

August 9, 2011 Aug 9, 2011 08/9/11
Doctor Scripto
Summary: Learn how to use Windows PowerShell to convert security descriptors to different formats.   Hey, Scripting Guy! I was reading through a listing of WMI methods recently, and I ran across a WMI class that looks interesting—Win32_SecurityDescriptorHelper. I think it will help me, because it seems like every security utility ...

Hey, Scripting Guy! Weekend Scripter: Using the Get-ACL Cmdlet to Show Inherited Permissions on Registry Keys

May 23, 2010 May 23, 2010 05/23/10
ScriptingGuy1
  Microsoft Scripting Guy Ed Wilson here. I was sitting in the kitchen waiting for my pot of English Breakfast tea to steep when my mind began to wander back over the week that was nearly completed. One of these days I will write a script to count the number of words in all the documents in a folder. That suggestion is actually up on the...

Hey, Scripting Guy! How Can I Grant Administrator Rights to Folders and Then Delete Them?

April 7, 2010 Apr 7, 2010 04/7/10
ScriptingGuy1
Hey Scripting Guy! Our previous network administrator was a slouch. He did not maintain proper backups, never reviewed event logs, and never cleaned up user folders when he deleted users in Active Directory. This last omission is particularly egregious because it has taken a lot of cleanup work to find and delete the user folders. One of the...

Hey, Scripting Guy! Can I Remove Specific Folder Access Rights on a Per-User Basis?

September 17, 2009 Sep 17, 2009 09/17/09
ScriptingGuy1
Share this post: Hey, Scripting Guy! There is this guy at work…well, actually he used to be at work and that is the problem. He left the company. The way security has been implemented at our company, I have to check specific folders, and if a user has been granted explicit access rights to the folders, the entry needs to be ...

Hey, Scripting Guy! Can I Apply Security Settings for One Folder to Many Other Folders?

September 16, 2009 Sep 16, 2009 09/16/09
ScriptingGuy1
Share this post: Hey, Scripting Guy! Our company is in the process of obtaining the ISO 20000 certification for IT service management and as a result it seems we have to have documentation and processes in place for everything. In the past when I created a folder I would manually set the security when I was finished. If I had ...