Forum Discussion

suren424's avatar
suren424
Copper Contributor
Oct 11, 2020
Solved

Getting a parent's parent for a folder using power shell

Hi,   I am using a powershell script to enable inheritance for the folders created in NTFS share.  In this script, i am getting the folder created for the user by passing a dynamic value and then ...
Windows PowerShell
  • farismalaeb's avatar
    farismalaeb
    Oct 17, 2020

    suren424 

    the script seems to be working,

    I try it on my side and the result was correct, good job.

    $Permission.SetAccessRuleProtection($False,$true)
Set-Acl -Path $allFolders.FullName -AclObject $Permission

    In the first line and as the $Permission is holding the folder ACL information, there is one of the methods called SetAccessRuleProtection, you can find all other methods and properties by using $Permission | Get-Member.

    More info here

    The SetAccessRuleProtection accepts 2 input IsProtected and PreservedInheritance 

    SetAccessRuleProtection (bool isProtected, bool preserveInheritance);

    IsProtected: Type is Bool ($True/$false) , $False= Enable Inheritance

    PreservedInheritance : This parameter is actually ignored as the IsProtected is set to false

     

    Thanks

     

    -------------------------

    Feel free to respond and request more information, if you find the answer that satisfy your need, Please make sure to mark it as Best Response and like the other.

     

suren424's avatar
suren424
Copper Contributor
Oct 12, 2020

Thanksfarismalaeb .

 

I tested the script few more times and yes it is not inheriting the permissions from parents parent.

 

So, will the below logic work ?

If the parent length is one, set the permission on parent to inherit from it's parent and then set the homefolder to inherit from it's parent.

 

Example :

HomeFolder : C:\OIMShare2\b\test\

Here the 'test' parent would be 'b'. so, inherit the permission from OIMShare2 to 'b' and after that set the permissions on 'test' to inherit from 'b'.

 

$the_shares = 'C:\OIMShare2\b\test\'
$allFolders=Get-ItemProperty -Path $the_shares
if (($allFolders.Parent.Name).Length -eq 1){
Write-Host "My Length is Only 1" 
Write-Host "Setting the permissions of" $allfolders.Name "based on" $allfolders.Parent.Parent.Name
$Permission=get-acl -Path $allfolders.Parent.Parent.FullName
$Permission.SetAccessRuleProtection($False,$true)
Set-Acl -Path $allfolders.FullName -AclObject $Permission
}
Else{
Write-Host "The Parent Length is longer than 1"
Write-Host "Setting the permissions of" $allfolders.Name "based on" $allfolders.Parent.Name
$allFolders.Parent.Name
$Permission=get-acl -Path $allfolders.Parent.FullName
$Permission.SetAccessRuleProtection($False,$true)
Set-Acl -Path $allfolders.FullName -AclObject $Permission
}

 

Thanks in advance

 

farismalaeb's avatar
farismalaeb
Iron Contributor
Oct 13, 2020
Yes surely the logic is possible and doable via powershell
Let me ask u on more question
This is Grandfather, Father, son relation
This should go in order
Maybe ibam asking the question again, but i am a bit confused.
Do u want to enable inherent in all the chain or u want to copy the permission?!
  • suren424's avatar
    suren424
    Copper Contributor
    Oct 13, 2020
    farismalaeb

    I would like enable inheritance so that it would get all the permissions.

    But, What is the difference between enable inherent in all the chain or u copying the permission?

    Thank you,

Resources