-
Notifications
You must be signed in to change notification settings - Fork 3
Save‐SMBSecurity
Commits changes made to SMBSecurityDescriptor(s) to the system.
Save-SMBSecurity [-SecurityDescriptor] <PSObject[]> [[-BackupPath] <String>] [-BackupWithRegFile] [-Force]
[<CommonParameters>]
Commits changes made to SMBSecurityDescriptor(s) to the system. Running this command will automatically generate a backup prior to the committing the change.
PS C:\> $SD = Get-SMBSecurity -SecurityDescriptorName SrvsvcDefaultShareInfo
PS C:\> $DACL = $SMBSec.DACL | Where-Object {$_.Account.Username -eq "Everyone"}
PS C:\> $DACL | Remove-SMBSecurityDACL -SecurityDescriptor $SMBSec
PS C:\> Save-SMBSecurity -SecurityDescriptor $SMBSec
This example removes the Everyone group DACL from the SrvsvcSharePrintInfo SMB SecurityDescriptor, and then saves the change to the system.
Path to the directory (folder) where backups will be written to. The automatic backup path (%LOCALAPPDATA%\SMBSecurity) is used when this parameter is not set.
Type: String
Parameter Sets: (All)
Aliases:
Required: False
Position: 1
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
Creates a full registry-based backup in addition to individual XML-based backup(s). The BackupPath is honored, when set; otherwise, the automatic backup path (%LOCALAPPDATA%\SMBSecurity) is used.
Type: SwitchParameter
Parameter Sets: (All)
Aliases:
Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
By default, changes are not committed to the system when the backup fails. The Force parameter will commit changes even if the backup fails.
Type: SwitchParameter
Parameter Sets: (All)
Aliases:
Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
The SMBSecurityDescriptor object to be committed to the registry. The SMBSecurityDescriptor object must originate from Get-SMBSecurity.
Type: PSObject[]
Parameter Sets: (All)
Aliases:
Required: True
Position: 0
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.
Development on this project has ended in a pre-release state. Please use with extreme caution! |
This project can be used AS-IS, with no warranties, guarantees, or support of any kind! A registry setting backup file is created prior to any change being committed. Use that reg file to restore the previous state, then restart the Server (LanmanServer) service to restore the old security state. |
📝 NOTE |
---|
The -ComputerName parameter is currently not supported! Please use PSRemoting to manage servers remotely. |