elesnox.blogg.se

Write-host "Adding $READ to the Read Share Access for the share: #Add account with read share permission to the Share 'Test Shared Folder' -CimSession $Session New-SmbShare -ErrorAction Stop -Name $SHARE -PATH $Path -Description Write-host "Creating SHARE: $SHARE" -ForegroundColor green #Create a default share with default permissions $Read = 'Nash\UTLPLN-NAS-PROD-RO', 'Nash\USWF-DEV-ANNEX-MASNAC'

The code works for a single group but balks at adding more than one group. I'm trying to setup remote shares on a server by first creating the default share with New-SmbShare and then adding groups to the share using Grant-SmbShareAccess. Invoke-Command -ComputerName $ComputerList -ScriptBlock $ScriptBlockĬan multiple accounts be added to a share using PowerShell? $SecuritySettings.SetSecurityDescriptor($Descriptor)

$Ace.AceFlags = 3 # ContainerInherit + ObjectInherit $Ace = ( "\\$ComputerName\root\cimv2:Win32_ACE").CreateInstance() $Trustee = ( "\\$ComputerName\root\cimv2:Win32_Trustee").CreateInstance() Get-WmiObject -Class Win32_LogicalShareSecuritySetting | foreach )

# List of drives that should not be checked for share permissions # on the server not included in the exclude list. # This script will remove the "Everyone" group from any shares # It would be great if someone can please help me acheive this. This script does list the folder which has Everyone added in share permission, But doesnt remediate the permissions. I got the script below from one of the forums but it doesnt work for me on Win10 Desktop. Now the point here is that i dont have the list of the folders on which we need to carry out following change, so i would need help in powershell script which can be set as startup script to help me achive this. Our Enviorment is mix of Windows 8 /10 on clients and Windows 2k8/2k12/2k16 on server side. I have a requirement where my IS Security Team wants us to remove Everyone Group from the shared folders and add Äuthenticated Users group instead.