PowerShell v3 Managing Share/NTFS Permissions -

-

background:

i've been trying write powershell script add/remove permissions folder. script 5th script in sequence of scripts kick off after another. scripts have shared variables, etc.

scripts follows:

  1. create ad group object
  2. create ad user object (or two, three, four, etc.)
  3. create user folder on application server , create data folder (to shared associated users) on file server
  4. this script, change permissions supposed be

i'm trying following (ntfs):

  1. user folder - system (full), administrator (full), domain admin (full), ad group (modify), users (modify)
  2. data folder - system (full), administrator (full), domain admin (full), ad group (modify), network service (full), users (read)

i'm trying following (share):

  1. data folder - system (full), administrator (full), domain admin (full), ad group (modify)

here i've been trying work with:

if use method locally, works great. shares folder such "c:test" without issue. can't run against servers (not sure if it's because i'm using variables or what). in case, data folder i'm trying change permissions on.

# configures folders have necessary permissions  # set folder path  # gname, sharedcomputername, , clientname come values in previous script  $server = $sharecomputername $share = "\d$\tran\"+$clientname  $fullsharepath = "$server"+"$share"  # assign permissions  net share $gname=$fullsharepath '/grant:administrators,full' '/grant:domain\account,change'

server os 2008 r2 , powershell v3. dc/ad 2012 though.

edit 4/2/15 - not duplicate question (i guess marked such)...see response user below.

edit 4/6/15 - how accomplished looking do...

here ended doing, pointer (to other threads/sources) rich chiavaroli.

to handle ntfs permissions, did following:

# setting ntfs directory permissions  $acl = get-acl "\\$servername\folderpath"  $rule = new-object system.security.accesscontrol.filesystemaccessrule("domain\user or usergroup","modify", "containerinherit, objectinherit", "none", "allow") $acl.addaccessrule($rule)  $rule = new-object system.security.accesscontrol.filesystemaccessrule("users","modify", "containerinherit, objectinherit", "none", "allow") $acl.addaccessrule($rule)  set-acl "\\$servername\folderpath" $acl

to handle share permissions, did following:

# configures folders have necessary permissions  # set folder path  $server = enter server name here (ex: \\test) $share = enter path folder here (ex: c:\test)  # assign share permissions  # user name/group give permissions $trustee = ([wmiclass]'win32_trustee').psbase.createinstance() $trustee.domain = "corp" $trustee.name = "$gname"  $trustee2 = ([wmiclass]'win32_trustee').psbase.createinstance() $trustee2.domain = "domain" $trustee2.name = "domain admins"  # access mask values $fullcontrol = 2032127 $change = 1245631 $read = 1179785  # create access-list $ace = ([wmiclass]'win32_ace').psbase.createinstance() $ace.accessmask = $fullcontrol $ace.aceflags = 3 $ace.acetype = 0 $ace.trustee = $trustee  $ace2 = ([wmiclass]'win32_ace').psbase.createinstance() $ace2.accessmask = $fullcontrol $ace2.aceflags = 3 $ace2.acetype = 0 $ace2.trustee = $trustee2  # security descriptor containing access $sd = ([wmiclass]'win32_securitydescriptor').psbase.createinstance() $sd.controlflags = 4 $sd.dacl = $ace, $ace2 $sd.group = $trustee $sd.owner = $trustee  $share = get-wmiobject win32_share -list -computername "$server" $share.create("$share", "name of share", 0, 100, "", "", $sd)

Comments

Post a Comment

Popular posts from this blog

How to run C# code using mono without Xamarin in Android? -

-
i want create program uses mono runtime run c# code (binary not application). i copied libmono.so unity app , i'm write code using documentation: http://www.mono-project.com/docs/advanced/embedding/ and it's working have problems references can access classes mscorlib.dll , have problems system.reflection.assembly class throwing exception, when print console see: system.missingmethodexception: method not found: 'system.reflection.assembly.op_inequality' can fix it? can use mono runtime in c binary on android? ps. i'm using android tests. edit: found solution loading libraries, need set environment variable mono_path libraries path. but have still problems assembly class. the system.missingmethodexception error have seems .net profile mismatch error, 1 explained here . can use mono runtime in c binary on android? yes, using ndk guess. there alternatives can use instead of rolling own, such xmadevlab .
Read more

c# - SharpSsh Command Execution -

-
Image
i trying create ssh client using c#. using tamir.sharpssh library. having issues sending command , getting appropriate response server. the way have been testing sending on ls command, followed cd.. command, followed ls command again -- see whether or not cd.. command being executed properly. however, there no difference between first ls command , second ls command. not entirely sure doing wrong. perhaps using wrong ssh type. have provided code , output getting. have added output expect. using tamir.sharpssh; namespace sshnetexample { class program { static void main(string[] args) { sshexec ssh = null; try { console.write("-connecting..."); ssh = new sshexec(host, username, password); ssh.connect(); console.writeline("ok ({0}/{1})", ssh.cipher, ssh.mac); console.writeline("server version={0}, client versio...
Read more

python - Specify path of savefig with pylab or matplotlib -

-
i struggling on how find correct way specify save path (or repository) when calling function savefig in matplotlib or pylab. i tried several syntaxes, everytime python console returns : filenotfounderror: [errno 2] no such file or directory: '../mydocs/resource/frames/myimage.png' currently, have written following : pylab.savefig('../mydocs/resource/frames/myimage.png') does know how it? thanks in advance! the tilde operator , variable $home entered strings , therefore not function while saving. have provide either relative path (as did) or provide full path. eg. pylab.savefig("/home/username/desktop/myfig.png") .
Read more