ACL - Search directories where inheritance has been broken?

akcorr

Is there a way to seach a directory tree and list out directories where
inherited permissions from the parent directories have been broken?

Marco Shaw [MVP]

akcorr wrote:
> Is there a way to seach a directory tree and list out directories where
> inherited permissions from the parent directories have been broken?

There must be a way, I'm just struggling with making it work.

Pseudo-code:
1. get-acl on the directory you want to compare against.
2. loop through all the directories recursively and get their ACL.
3. compare the original ACL with the current one.
4. print something out if they are different.

I'll play with it some more...

Marco

--
Microsoft MVP - Windows PowerShell
http://www.microsoft.com/mvp

PowerGadgets MVP
http://www.powergadgets.com/mvp

Blog:
http://marcoshaw.blogspot.com

Marco Shaw [MVP]

akcorr wrote:
> Is there a way to seach a directory tree and list out directories where
> inherited permissions from the parent directories have been broken?

Give this a try:

PSH>$acl=get-acl . #Your base ACL you want to compare against.
PSH>
get-childitem . -recurse|where-object{$_.psiscontainer}| `
foreach-object{
if($(compare-object $((get-acl $_.fullname).access) `
$($acl.access)) -ne $null){$_.fullname}
}

Start this last command from the directory you want to look through and
compare against $acl.

(Sorry for the formatting!)

--
Microsoft MVP - Windows PowerShell
http://www.microsoft.com/mvp

PowerGadgets MVP
http://www.powergadgets.com/mvp

Blog:
http://marcoshaw.blogspot.com