Created by
Doug Freed
| $myacl = Get-Acl -Path somefile
$myacl.Access | % { $colRights = [System.Security.AccessControl.FileSystemRights]"Write"; $InheritanceFlag = [System.Security.AccessControl.InheritanceFlags]::None; $PropagationFlag = [System.Security.AccessControl.PropagationFlags]::None; $objType = [System.Security.AccessControl.AccessControlType]::Deny; $objUser = $_.IdentityReference; $objACE = New-Object System.Security.AccessControl.FileSystemAccessRule ($objUser, $colRights, $InheritanceFlag, $PropagationFlag, $objType); $myacl.AddAccessRule($objACE); }
Set-Acl -Path somefile -AclObject $myacl
|