en-US/about_WindowsAccessControlProcessSecurityDescriptor.help.txt
|
.NAME
WindowsAccessControlProcessSecurityDescriptor .SYNOPSIS Manages the exact security descriptor of a running process. .DESCRIPTION Compares the selected sections of the process security descriptor against the desired SDDL and rewrites only those sections. The target is pinned by process identifier and creation time, so a reused identifier fails closed rather than reaching a different process. Process desired state is ephemeral and valid only while that process instance lives. .PARAMETER ProcessId Key - uint32 The identifier of the process whose descriptor is managed. .PARAMETER CreationTimeFileTime Key - int64 The creation time of the pinned process instance as a file time. It distinguishes the intended process from a later one that reused the identifier. .PARAMETER Sections Key - WindowsSecurityDescriptorSection The security descriptor sections this resource owns. Only these sections are compared and written. .PARAMETER Sddl Required - string The desired security descriptor for the selected sections, in SDDL form. Capture it from Get-ProcessSecurityDescriptor. .PARAMETER Reasons Read - WindowsAccessControlDscReason[] Returns why the resource is not in the desired state. Not configurable. |