Set-Acl AddAccessRule for Public folder

spiceuser-ni4z · 2021-07-01T17:08:46.000Z

This should be simple, but I’m struggling with it today.

Looking for a very basic Set-Acl powershell command to add BUILTIN\Users to have ONLY delete access at C:\Users\Pulic\Desktop

Was trying this based on a google search, but it always fails at the 2nd to last line (AddAccessRule)

$dir = 'C:\Users\Public\'
$identity = 'BUILTIN\User'
$rights = 'Delete' #Other options: [enum]::GetValues('System.Security.AccessControl.FileSystemRights')
$inheritance = 'ContainerInherit, ObjectInherit' #Other options: [enum]::GetValues('System.Security.AccessControl.Inheritance')
$propagation = 'None' #Other options: [enum]::GetValues('System.Security.AccessControl.PropagationFlags')
$type = 'Allow' #Other options: [enum]::GetValues('System.Securit y.AccessControl.AccessControlType')
$ACE = New-Object System.Security.AccessControl.FileSystemAccessRule($identity,$rights,$inheritance,$propagation, $type)
$Acl = Get-Acl -Path "$dir\Desktop"
$Acl.AddAccessRule($ACE)
Set-Acl -Path "$dir\Assets" -AclObject $Acl

Neally · 2021-07-01T17:22:09.000Z

Welcome

If you post code, please use the ‘Insert Code’ button. Please and thank you!

PLEASE READ BEFORE POSTING! Read if you're new to the PowerShell forum! Programming & Development

Hi, and welcome to the PowerShell forum! Don’t apologize for being a “noob” or “newbie” or “n00b.” There’s just no need – nobody will think you’re stupid, and the forums are all about asking questions. Just ask! Use a descriptive subject. Don’t say “Need help” or “PowerShell Help”, actually summarize what the problem is. It helps the rest of us keep track of which problem is which. Don’t post massive scripts. We’re all volunteers and we don’t have time to read all that, nor will we copy…

spiceuser-ni4z · 2021-07-01T17:25:50.000Z

Corrected. Thanks for the feedback.

francishagyard2 · 2021-07-02T15:41:59.000Z

spiceuser-ni4z:

Looking for a very basic Set-Acl powershell command to add BUILTIN\Users to have ONLY delete access at C:\Users\Pulic\Desktop

Looks like a typo, you’re missing an s for that identity reference in the code you posted. Try changing it to

$identity = 'BUILTIN\Users'

Also your Set-Acl command is assigning the new rights to the “Assets” folder so you would want to change that to Desktop

Set-Acl -Path "$dir\Desktop" -AclObject $Acl