Indented!

A short script to list explicit rights assigned to a directory structure. It uses the recursive option of ls (an Alias for Get-ChildItem) to drop down through the directory structure.

There are lots of little programs around that can do exactly the same thing, probably quite a few more efficiently than this.

The match is not case sensitive. If the value for $SecurityPrincipal is left blank the script will return all explicitly assigned rights.

# Uses match, either a specific user / group or blank for all explicit rights
$SecurityPrincipal = "chris"
# The starting point
$BasePath = "C:\"

# An array to hold the data returned
$ExplicitRights = @()
ForEach ($DirEntry in (ls -r $BasePath)) {
  # Add an entry to the report where it matches the criteria set in the ? pipe

  $ExplicitRights += (Get-ACL -Path $DirEntry.FullName).Access `
    | Select-Object @{n="Path";e={($DirEntry.FullName)}}, `
      FileSystemRights,IsInherited,IdentityReference `
    | ?{ ((($_.IdentityReference.Value) -match $SecurityPrincipal) -and `
      ($_.IsInherited -eq $False))}
}
# Write the array to the screen. Piping into Export-CSV should work as well
$ExplicitRights

No related posts.

Related posts brought to you by Yet Another Related Posts Plugin.