Mastering Windows PowerShell Scripting - Third Edition

Remoting permissions by script

Permissions may also be changed using a script. The following commands retrieve the current security descriptor:

using namespace System.Security.AccessControl 
 
$sddl = Get-PSSessionConfiguration microsoft.powerShell | 
    Select-Object -ExpandProperty SecurityDescriptorSddl 
$acl = [CommonSecurityDescriptor]::new( 
    $false, 
    $false, 
    $sddl 
) 
$acl.DiscretionaryAcl 

The object created here does not translate access masks into meaningful names. There are a small number of possible values for the access mask (shown here as 32-bit integers):

• Full (All operations): 268435456
• Read (Get, Enumerate, Subscribe): -2147483648
• Write (Put, Delete, Create): 1073741824
• Execute (Invoke): 536870912

Permissions may be combined by using ...