en-US/about_WindowsAccessControlTaskFolderSecurityDescriptor.help.txt
|
.NAME
WindowsAccessControlTaskFolderSecurityDescriptor .SYNOPSIS Manages the exact DACL of a Task Scheduler folder. .DESCRIPTION Compares the task folder's access control list against the desired SDDL and rewrites it. Access control entry order is ignored during comparison because the Task Scheduler service canonicalizes it after a write, so this resource cannot detect a reordering that moves an allow entry ahead of a deny entry. Do not make it the sole drift control for an order-sensitive deny entry. .PARAMETER Path Key - string The task folder whose DACL is managed. .PARAMETER Sections Key - WindowsSecurityDescriptorSection The security descriptor sections this resource owns. Only the access section is supported for a task folder. .PARAMETER AllowedRootPath Required - string The task folder subtree the configuration is allowed to write under. A target outside it is refused before anything is written. .PARAMETER Sddl Required - string The desired DACL in SDDL form. Capture it from Get-TaskFolderSecurityDescriptor. .PARAMETER Reasons Read - WindowsAccessControlDscReason[] Returns why the resource is not in the desired state. Not configurable. |