Mastering Windows PowerShell Scripting - Third Edition

Numeric values in the access control list

The FileSystemRights enumeration used in the previous examples does not quite cover all of the possible values one might see when inspecting an ACL. In some cases, the rights will be shown as numeric values rather than names.

The -536805376 and 268435456 values were both included in some earlier examples. The missing values are part of the generic portion of the access control entry in Microsoft docs: https://docs.microsoft.com/en-us/windows/desktop/SecAuthZ/access-mask-format.

This generic portion is not accounted for by the FileSystemRights enumeration. These generic values, in turn, represent summarized rights, as shown on this page: https://docs.microsoft.com/en-us/windows/desktop/FileIO/file-security-and-access-rights ...