-
Notifications
You must be signed in to change notification settings - Fork 3
Remove‐SMBSecurityDACL
Removes a DACL from an SMBSecurityDescriptor.
Remove-SMBSecurityDACL [-SecurityDescriptor] <PSObject> [-DACL] <SMBSecDaclAce> [-PassThru]
[<CommonParameters>]
Removes a DACL from an SMBSecurityDescriptor. This does not commit the change to the system, it only modifies the SMBSecurityDescriptor. The Save-SMBSecurity cmdlet is used to commit changes to a SMBSecurityDescriptor to the system.
PS C:\> $SD = Get-SMBSecurity -SecurityDescriptorName SrvsvcSharePrintInfo
PS C:\> $DACL = $SD | Where-Object {$_.Account.Username -eq "Everyone"}
PS C:\> $DACL | Remove-SMBSecurityDACL -SecurityDescriptor $SD
This example removes the Everyone group DACL from the SrvsvcSharePrintInfo SMB SecurityDescriptor.
The DACL being removed to the SMBSecurityDescriptor. The DACL must be an exact match to a DACL in the SMBSecurityDescriptor object.
Type: SMBSecDaclAce
Parameter Sets: (All)
Aliases:
Required: True
Position: 1
Default value: None
Accept pipeline input: True (ByValue)
Accept wildcard characters: False
Outputs the modified SMBSecurityDescriptor to the success stream.
Type: SwitchParameter
Parameter Sets: (All)
Aliases:
Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
The SMBSecurityDescriptor object where the DACL should be removed. The SMBSecurityDescriptor object must originate from Get-SMBSecurity.
Type: PSObject
Parameter Sets: (All)
Aliases:
Required: True
Position: 0
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.
Development on this project has ended in a pre-release state. Please use with extreme caution! |
This project can be used AS-IS, with no warranties, guarantees, or support of any kind! A registry setting backup file is created prior to any change being committed. Use that reg file to restore the previous state, then restart the Server (LanmanServer) service to restore the old security state. |
📝 NOTE |
---|
The -ComputerName parameter is currently not supported! Please use PSRemoting to manage servers remotely. |