22 lines
633 B
PowerShell
22 lines
633 B
PowerShell
$folderPath = "C:\Scripts"
|
|
$groupName = "NT AUTHORITY\Authenticated Users"
|
|
|
|
# Get current ACL
|
|
$acl = Get-Acl -Path $folderPath
|
|
|
|
# Create a new FileSystemSecurity object
|
|
$newAcl = New-Object System.Security.AccessControl.DirectorySecurity
|
|
|
|
# Disable inheritance and copy existing rules
|
|
$newAcl.SetAccessRuleProtection($true, $true)
|
|
|
|
# Get all rules except Authenticated Users
|
|
$rules = $acl.Access | Where-Object {$_.IdentityReference -ne $groupName}
|
|
|
|
# Add each rule to the new ACL
|
|
foreach ($rule in $rules) {
|
|
$newAcl.AddAccessRule($rule)
|
|
}
|
|
|
|
# Apply the modified ACL back to the folder
|
|
Set-Acl -Path $folderPath -AclObject $newAcl |