Security Identifiers (SIDs) and NT Account name
Monday, March 26th, 2007I have a couple of functions that are quite useful when dealing with Active Directory permissions. Translate SID to NT Account: :get-NTaccount.ps1 #---------------------------------------------------------------------------------------------------------- function get-NTaccount #---------------------------------------------------------------------------------------------------------- { Param ( $SID ) $id = New-Object System.Security.Principal.SecurityIdentifier($sid) $account = $id.Translate( [System.Security.Principal.NTAccount] ) return $account } #---------------------------------------------------------------------------------------------------------- get-NTaccount "S-1-5-21-812403740-544655063-2921696178-1958" In this function we take a SID in [...]
Setting Filesystem permissions using SDDL format
Tuesday, January 23rd, 2007When it comes to setting the permission on the filesystem there has already been some interesting conversation between Tony (MSHforFun blog) and Marc (MOW): http://mshforfun.blogspot.com/2005/12/play-with-acl-in-msh.html This is fine if you want to add your ACE into an existing DACL. But what if you want to completely overwrite the DACL and “roll-your-own”? I posed this question [...]