en-US/about_WindowsAccessControlNtfsSecurityDescriptor.help.txt
|
.NAME
WindowsAccessControlNtfsSecurityDescriptor .SYNOPSIS Manages the exact security descriptor of a file or directory. .DESCRIPTION Compares the selected sections of the NTFS security descriptor at Path against the desired SDDL and rewrites only those sections. Every section the resource does not select is left untouched. System-maintained AUTO_INHERITED flags are ignored during comparison, while protection flags and every access control entry stay exact. .PARAMETER Path Key - string The file or directory whose security descriptor is managed. .PARAMETER Sections Key - WindowsSecurityDescriptorSection The security descriptor sections this resource owns. Only these sections are compared and written. .PARAMETER Sddl Required - string The desired security descriptor for the selected sections, in SDDL form. Capture it from Get-NTFSItemSecurityDescriptor. Prefer a protected DACL so parent inheritance cannot add entries after convergence. .PARAMETER Reasons Read - WindowsAccessControlDscReason[] Returns why the resource is not in the desired state. Not configurable. |