====== Berechtigungen filtern und ändern ======

<code Powershell|Script zum finden der Ordner. Erstellt eine CSV>
$folders = get-childitem c:\local
"" > logfile.txt

foreach ($folder in $folders)
{
	$acl = get-acl $folder.FullName
	foreach ($rule in $acl.access)
	{
		if ($rule.IdentityReference.Value -eq "Jeder")
		{
			$folder.fullname + ";" + $rule.IdentityReference.Value + ";" + $rule.FileSystemRights >> logfile.txt
		}
	}
}
</code>

<code Powershell|Entfernt "Jeder" aus den Dateiberechtigungen und bricht die Vererbung auf>
$folders = get-childitem "D:\User-Profiles"
$logfile = "C:\Administration\profile\logfile.txt"
"" > $logfile
$Username = "Jeder"
foreach ($folder in $folders)
{
                $folder.Fullname
                $acl = get-acl $folder.FullName
                $isFound = $false
                $acl.SetAccessRuleProtection($true,$true)
                Set-ACL $folder.FullName $acl
                $acl = get-acl $folder.FullName
                "-----------------------------------------------------------------------" >> $logfile
                foreach ($rule in $acl.access)
                {
                               if ($rule.identityreference.value -eq $Username)
                               {
                                               $acl.removeaccessruleall($rule)                              
                                               "Jeder gefunden in " + $Folder.FullName >> $logfile
                                               $isFound = $true
                               }
                }
                if ($isFound)
                {
                               $ACL.Access >> $logfile
                               Set-ACL $folder.FullName $acl
                }
#             $x = $host.UI.RawUI.ReadKey("NoEcho,IncludeKeyDown")                                     
}
</code>

{{tag>[Powershell]}}