Scripting Blog

A place to learn about PowerShell and share stories of automation

Use PowerShell to Convert SDDL to Binary Format

Summary: Learn how to use Windows PowerShell to convert security descriptors to different formats.   Hey, Scripting Guy! I was reading through a listing of WMI methods recently, and I ran across a WMI class that looks interesting—Win32_SecurityDescriptorHelper. I think it will help me, because it seems like every security utility ...

Hey, Scripting Guy! Weekend Scripter: Using the Get-ACL Cmdlet to Show Inherited Permissions on Registry Keys

  Microsoft Scripting Guy Ed Wilson here. I was sitting in the kitchen waiting for my pot of English Breakfast tea to steep when my mind began to wander back over the week that was nearly completed. One of these days I will write a script to count the number of words in all the documents in a folder. That suggestion is actually up on the...

Hey, Scripting Guy! How Can I Grant Administrator Rights to Folders and Then Delete Them?

Hey Scripting Guy! Our previous network administrator was a slouch. He did not maintain proper backups, never reviewed event logs, and never cleaned up user folders when he deleted users in Active Directory. This last omission is particularly egregious because it has taken a lot of cleanup work to find and delete the user folders. One of the...

Hey, Scripting Guy! Can I Remove Specific Folder Access Rights on a Per-User Basis?

Share this post: Hey, Scripting Guy! There is this guy at work…well, actually he used to be at work and that is the problem. He left the company. The way security has been implemented at our company, I have to check specific folders, and if a user has been granted explicit access rights to the folders, the entry needs to be ...

Hey, Scripting Guy! Can I Apply Security Settings for One Folder to Many Other Folders?

Share this post: Hey, Scripting Guy! Our company is in the process of obtaining the ISO 20000 certification for IT service management and as a result it seems we have to have documentation and processes in place for everything. In the past when I created a folder I would manually set the security when I was finished. If I had ...