默認(rèn)目錄的權(quán)限是繼承父目錄的,你當(dāng)然可以關(guān)閉它的繼承和分配指定的權(quán)限。
下面例子創(chuàng)建了“PermissionNoInheritance”的文件夾,允許當(dāng)前用戶讀取,同時(shí)管理員組獲得其所有管理權(quán)限,并關(guān)閉它的繼承。
# create folder$Path = 'c:/PermissionNoInheritance'$null = New-Item -Path $Path -ItemType Directory -ErrorAction SilentlyContinue # get current permissions$acl = Get-Acl -Path $path # add a new permission for current user$permission = $env:username, 'Read,Modify', 'ContainerInherit, ObjectInherit', 'None', 'Allow'$rule = New-Object -TypeName System.Security.AccessControl.FileSystemAccessRule -ArgumentList $permission$acl.SetAccessRule($rule) # add a new permission for Administrators$permission = 'Administrators', 'FullControl', 'ContainerInherit, ObjectInherit', 'None', 'Allow'$rule = New-Object -TypeName System.Security.AccessControl.FileSystemAccessRule -ArgumentList $permission$acl.SetAccessRule($rule) # disable inheritance$acl.SetAccessRuleProtection($true, $false) # set new permissions$acl | Set-Acl -Path $path
新聞熱點(diǎn)
疑難解答
圖片精選