Configuration driven Active Directory management.
Registers an access rule for FileSystem paths on a domain controller.
Register-DCAccessRule -Path <String> -Identity <String> -Rights <FileSystemRights> [-Type <AccessControlType>]
[-Inheritance <InheritanceFlags>] [-Propagation <PropagationFlags>] [-AccessMode <String>]
[-ServerRole <String>] [-ContextName <String>] [<CommonParameters>]
Register-DCAccessRule -Path <String> -Empty <Boolean> [-ServerRole <String>] [-ContextName <String>]
[<CommonParameters>]
Registers an access rule for FileSystem paths on a domain controller.
Get-Content .\accessrules.json | ConvertFrom-Json | Write-Output | Register-DCAccessRule
Reads all access rule definitions from json and imports the definitions.
The path to the filesystem object to grant permissions on. Supports string resolution.
Type: String
Parameter Sets: (All)
Aliases:
Required: True
Position: Named
Default value: None
Accept pipeline input: True (ByPropertyName)
Accept wildcard characters: False
What identity / principal to grant access. Supports string resolution.
Type: String
Parameter Sets: ACE
Aliases:
Required: True
Position: Named
Default value: None
Accept pipeline input: True (ByPropertyName)
Accept wildcard characters: False
What file system right to grant.
Type: FileSystemRights
Parameter Sets: ACE
Aliases:
Accepted values: ListDirectory, ReadData, WriteData, CreateFiles, CreateDirectories, AppendData, ReadExtendedAttributes, WriteExtendedAttributes, Traverse, ExecuteFile, DeleteSubdirectoriesAndFiles, ReadAttributes, WriteAttributes, Write, Delete, ReadPermissions, Read, ReadAndExecute, Modify, ChangePermissions, TakeOwnership, Synchronize, FullControl
Required: True
Position: Named
Default value: None
Accept pipeline input: True (ByPropertyName)
Accept wildcard characters: False
Whether this is an allow or a deny rule. Defaults to Allow.
Type: AccessControlType
Parameter Sets: ACE
Aliases:
Accepted values: Allow, Deny
Required: False
Position: Named
Default value: Allow
Accept pipeline input: True (ByPropertyName)
Accept wildcard characters: False
Who and how are access rules inherited. Defaults to ‘ContainerInherit, ObjectInherit’, meaning everything beneath the path inherits as well.
Type: InheritanceFlags
Parameter Sets: ACE
Aliases:
Accepted values: None, ContainerInherit, ObjectInherit
Required: False
Position: Named
Default value: ContainerInherit, ObjectInherit
Accept pipeline input: True (ByPropertyName)
Accept wildcard characters: False
How access rules are being propagated. Defaults to “None”, the windows default behavior.
Type: PropagationFlags
Parameter Sets: ACE
Aliases:
Accepted values: None, NoPropagateInherit, InheritOnly
Required: False
Position: Named
Default value: None
Accept pipeline input: True (ByPropertyName)
Accept wildcard characters: False
This path should have no explicit ACE defined.
Type: Boolean
Parameter Sets: Empty
Aliases:
Required: True
Position: Named
Default value: False
Accept pipeline input: True (ByPropertyName)
Accept wildcard characters: False
How filesystem access rules are processed. Supports three configurations:
Type: String
Parameter Sets: ACE
Aliases:
Required: False
Position: Named
Default value: Constrained
Accept pipeline input: True (ByPropertyName)
Accept wildcard characters: False
What domain controller to apply this to:
Type: String
Parameter Sets: (All)
Aliases:
Required: False
Position: Named
Default value: All
Accept pipeline input: True (ByPropertyName)
Accept wildcard characters: False
The name of the context defining the setting. This allows determining the configuration set that provided this setting. Used by the ADMF, available to any other configuration management solution.
Type: String
Parameter Sets: (All)
Aliases:
Required: False
Position: Named
Default value: <Undefined>
Accept pipeline input: False
Accept wildcard characters: False
This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.