Get-Acl 查看文件权限

 https://blogs.msmvps.com/erikr/2007/09/26/set-permissions-on-a-specific-service-windows/

 

Get-Acl .\LISA.BackOffice.log | Format-List


Path : Microsoft.PowerShell.Core\FileSystem::D:\ChuckLu\Git\Edenred\LISA_5.0.0.0\LISA.BackOffice\log\LISA.BackOffice.
log
Owner : NT AUTHORITY\NETWORK SERVICE
Group : NT AUTHORITY\NETWORK SERVICE
Access : NT AUTHORITY\Authenticated Users Deny Write
NT AUTHORITY\SYSTEM Deny Write
BUILTIN\Administrators Deny Write
BUILTIN\Administrators Allow FullControl
NT AUTHORITY\SYSTEM Allow FullControl
NT AUTHORITY\Authenticated Users Allow Modify, Synchronize
BUILTIN\Users Allow ReadAndExecute, Synchronize
NT AUTHORITY\NETWORK SERVICE Allow Read, Synchronize
Audit :
Sddl : O:NSG:NSD:AI(D;;DCLCRPCR;;;AU)(D;;DCLCRPCR;;;SY)(D;;DCLCRPCR;;;BA)(A;ID;FA;;;BA)(A;ID;FA;;;SY)(A;ID;0x1301bf;;
;AU)(A;ID;0x1200a9;;;BU)(A;ID;FR;;;NS)

 

 

关于Sddl

 

posted @ 2018-04-16 18:32  ChuckLu  阅读(1120)  评论(0编辑  收藏  举报