通過PowerShell的文件夾權限

Question

即時通訊嘗試設置在AD中新創建的用戶的一些權利。 我創建的文件夾後，我嘗試設置這樣的各種權利：

$Rights = [System.Security.AccessControl.FileSystemRights]::FullControl 
$Inherit = @([System.Security.AccessControl.InheritanceFlags]::ContainerInherit,[System.Security.AccessControl.InheritanceFlags]::ObjectInherit) 
$Propagation = [System.Security.AccessControl.PropagationFlags]::None 
$Access =[System.Security.AccessControl.AccessControlType]::Allow 
$ACL = New-Object System.Security.Principal.NTAccount "localdomain\$userprincipalname" 
$objACE = New-Object System.Security.AccessControl.FileSystemAccessRule($ACL, $Rights, $Inherit, $Propagation, $Access)      
$ACL = Get-Acl -Path $userDir 
$ACL.AddAccessRule($objACE) 
Set-ACL -Path $userDir -AclObject $ACL 

我得到的是與我傳遞給AddAccessRule

Exception calling "AddAccessRule" with "1" argument(s): "Some or all identity references could not be translated." 
+ CategoryInfo   : NotSpecified: (:) [], MethodInvocationException 
+ FullyQualifiedErrorId : DotNetMethodException 

參數錯誤，但我看不到任何錯誤在這裏，所以我會非常感激另一雙眼睛。

Answer 1

好的，我的解決方案能夠正常工作，並且據我所知，是設置文件夾權限的方法。

$Rights = [System.Security.AccessControl.FileSystemRights]::FullControl 
$Inherit = @([System.Security.AccessControl.InheritanceFlags]::ContainerInherit,[System.Security.AccessControl.InheritanceFlags]::ObjectInherit) 
$Propagation = [System.Security.AccessControl.PropagationFlags]::None 
$Access =[System.Security.AccessControl.AccessControlType]::Allow 
$ACL = New-Object System.Security.Principal.NTAccount "localdomain\$userprincipalname" 
$objACE = New-Object System.Security.AccessControl.FileSystemAccessRule($ACL, $Rights,$Inherit, $Propagation, $Access)      
$ACL = Get-Acl -Path $userDir 
$ACL.AddAccessRule($objACE) 
Set-ACL -Path $userDir -AclObject $ACL