Hello,

Im newbie for scripting or powershell

Case background

We have created 120 folder in //fileserver/sharepath/ and all this 120 folder been name using users AD username.

How can i automated the permission setting for each folder (full control), using the folder name input.

Example

user = John Smith and the AD username jsmith

//fileserver/sharepath/jsmith  

permission setting for above folder should be full control for the admin and jsmith account only

Thanks

  

This console command will do the trick:

for /d %a in (*.*) do @icacls "%a"  /T  /grant "%a":F  System:F  Administrator:F

Best to first test the command on a single folder:

icacls "jsmith"  /T  /grant "jsmith":F  System:F  Administrator:F

• Edited by Forest brookMicrosoft community contributor 3 hours 33 minutes ago

You can try this with the below code. Please test with one or two folder in different location before applying in PRODUCTION.

cls
Set-Location "//fileserver/sharepath/"
$SharedFolder= "//fileserver/sharepath/"
$Folders = Import-Csv "c:\FolderPermission.csv"
<#
The FolderPermission.csv format shuld be like below
Name,User,Perm,Rule
Dir1,AduserName1,FullControl,Allow
Dir2,AdUserName2,FullControl,Allow
Dir3,AdUserName3FullControl,Allow
#>
ForEach ($Folder in $Folders) {
$Dir = $Folder.Name
$User = $Folder.User
$Perm = $Folder.Perm
$Rule = $Folder.Rule
$ACL = Get-Acl "$Pfad\$Dir"
$ACL.AddAccessRule((New-Object System.Security.AccessControl.FileSystemAccessRule("$User", "$Perm", "ContainerInherit, ObjectInherit", "None", "$Rule")))
Set-Acl "$SharedFolder\$dir" $Acl
}

This console command will do the trick:

for /d %a in (*.*) do @icacls "%a"  /T  /grant "%a":F  System:F  Administrator:F

Best to first test the command on a single folder:

icacls "jsmith"  /T  /grant "jsmith":F  System:F  Administrator:F

• Edited by Forest brookMicrosoft community contributor Tuesday, October 29, 2013 6:58 AM

You can try this with the below code. Please test with one or two folder in different location before applying in PRODUCTION.

cls
Set-Location "//fileserver/sharepath/"
$SharedFolder= "//fileserver/sharepath/"
$Folders = Import-Csv "c:\FolderPermission.csv"
<#
The FolderPermission.csv format shuld be like below
Name,User,Perm,Rule
Dir1,AduserName1,FullControl,Allow
Dir2,AdUserName2,FullControl,Allow
Dir3,AdUserName3FullControl,Allow
#>
ForEach ($Folder in $Folders) {
$Dir = $Folder.Name
$User = $Folder.User
$Perm = $Folder.Perm
$Rule = $Folder.Rule
$ACL = Get-Acl "$SharedFlder\$Dir"
$ACL.AddAccessRule((New-Object System.Security.AccessControl.FileSystemAccessRule("$User", "$Perm", "ContainerInherit, ObjectInherit", "None", "$Rule")))
Set-Acl "$SharedFolder\$dir" $Acl
}