tricounty/tcse-deploy
2
0
Fork 0
Code

Updated Script

Browse Source
This commit is contained in:
bschaper 2025-01-14 13:24:38 -06:00
parent 06c08beeb2
commit 22bc7e4d05
1 changed files with 19 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
Patches/Windows/Remove-Permissions.ps1
View File

@ -1,10 +1,22 @@
$computerName = $env:COMPUTERNAME
$domain = (Get-WmiObject Win32_ComputerSystem).Domain
$folderPath = "C:\Scripts" $folderPath = "C:\Scripts"
$groupName = "Authenticated Users" $groupName = "NT AUTHORITY\Authenticated Users"
# Get current ACL
$acl = Get-Acl -Path $folderPath $acl = Get-Acl -Path $folderPath
$acl.SetAccessRuleProtection($true, $false)
$acl.RemoveAccessRule($acl.Access | Where-Object {$_.IdentityReference -eq "$domain\$groupName"}) # Create a new FileSystemSecurity object
Set-Acl -Path $folderPath -AclObject $acl $newAcl = New-Object System.Security.AccessControl.DirectorySecurity
# Disable inheritance and copy existing rules
$newAcl.SetAccessRuleProtection($true, $true)
# Get all rules except Authenticated Users
$rules = $acl.Access | Where-Object {$_.IdentityReference -ne $groupName}
# Add each rule to the new ACL
foreach ($rule in $rules) {
$newAcl.AddAccessRule($rule)
}
# Apply the modified ACL back to the folder
Set-Acl -Path $folderPath -AclObject $newAcl