So, i'm not quite sure where i'm going wrong here... Or if I am at all..
I want to just remove everyone full control from root of filesystem share.. so for example
\\share\share$ .. Not share NTFS PERMS.
$shares=read-host"Enter list of ntfs root shares to adjust permissions"
$shares= gc $shares
$shares | % {
$share=$_
### Add Built-in Administrators Group to folder
$acl=Get-Acl$share
$acl.SetAccessRuleProtection($True, $False)
$rule=New-ObjectSystem.Security.AccessControl.FileSystemAccessRule("Administrators","FullControl", "ContainerInherit, ObjectInherit", "None", "Allow")
$acl.AddAccessRule($rule)
Set-Acl$share$acl | out-null
## Remove Everyone Group
$acl=get-acl$share
$account=new-objectsystem.security.principal.ntaccount("everyone")
$acl.purgeaccessrules($account)
set-acl$share$acl | out-null
}
$shares= gc $shares
$shares | % {
$share=$_
### Add Built-in Administrators Group to folder
$acl=Get-Acl$share
$acl.SetAccessRuleProtection($True, $False)
$rule=New-ObjectSystem.Security.AccessControl.FileSystemAccessRule("Administrators","FullControl", "ContainerInherit, ObjectInherit", "None", "Allow")
$acl.AddAccessRule($rule)
Set-Acl$share$acl | out-null
## Remove Everyone Group
$acl=get-acl$share
$account=new-objectsystem.security.principal.ntaccount("everyone")
$acl.purgeaccessrules($account)
set-acl$share$acl | out-null
}