Can´t get inheritfrom folder name
Question
-
Hi everyone !
I need your help regarding to a script i´m building that print the same acl that windows gui shows the security tab.
The thing is, that i have a scenario where the script doesnt show the "inherited from" directory.
I have found an example, where a child directory has an applyTo "This folder and subolders", but its parent has "This folder, subfolders and files". And thats why, i get no inherit from.
But from the windows gui security tab, it shows the inherit from .
Here is the example, and below the script.
I will appreciate any help, cause i´ve read a lot and tried everything find a solution but i haven´t found it yet.Thanks a lot in advance !!
Example:
Parent Directory:
Child Directory:
Script
function get-FindInheritedLocal{ [CmdLetBinding()] param( [Parameter(Mandatory=$true)][String]$directory, [Parameter(Mandatory=$true)][System.Security.AccessControl.FileSystemAccessRule]$user ) BEGIN{ # I get for only the first time the acl of the user i give as parameter and the directory
$acc=(get-acl (split-path -Path $directory -Parent)).Access | ? {$_.IdentityReference -eq $user.IdentityReference` -and $_.AccessControlType -eq $user.AccessControlType -and $_.InheritanceFlags` -eq $user.InheritanceFlags -and $_.FileSystemRights -eq $user.FileSystemRights` -and $_.PropagationFlags -eq $user.PropagationFlags} } PROCESS{ # While is inherited and it has a parent folder
while ($acc.IsInherited -eq $true -and (Split-Path -Path $directory -Parent)){ # I assign to $directory, the parent directory
$directory=Split-Path -Path $directory -Parent # Brings the acl of the user
$acc=(get-acl -Path $directory).Access | ? {$_.IdentityReference -eq $user.IdentityReference` -and $_.AccessControlType -eq $user.AccessControlType -and $_.InheritanceFlags` -eq $user.InheritanceFlags -and $_.FileSystemRights -eq $user.FileSystemRights` -and $_.PropagationFlags -eq $user.PropagationFlags} # If it is not inherited, it found the parent where it inherited from if($a=$acc | ? {$_.isinherited -eq $false}){ $prop = @{ Path=$directory Permission=$a.FileSystemRights Identity=$a.IdentityReference } $entity = New-Object -TypeName psobject -Property $prop return $entity } } } END{} }
- Edited by Octavio J Tuesday, November 28, 2017 1:13 AM
