Get-Acl 查看文件权限

https://blogs.msmvps.com/erikr/2007/09/26/set-permissions-on-a-specific-service-windows/

Get-Acl .\LISA.BackOffice.log | Format-List

Path : Microsoft.PowerShell.Core\FileSystem::D:\ChuckLu\Git\Edenred\LISA_5.0.0.0\LISA.BackOffice\log\LISA.BackOffice.
log
Owner : NT AUTHORITY\NETWORK SERVICE
Group : NT AUTHORITY\NETWORK SERVICE
Access : NT AUTHORITY\Authenticated Users Deny Write
NT AUTHORITY\SYSTEM Deny Write
BUILTIN\Administrators Deny Write
BUILTIN\Administrators Allow FullControl
NT AUTHORITY\SYSTEM Allow FullControl
NT AUTHORITY\Authenticated Users Allow Modify, Synchronize
BUILTIN\Users Allow ReadAndExecute, Synchronize
NT AUTHORITY\NETWORK SERVICE Allow Read, Synchronize
Audit :
Sddl : O:NSG:NSD:AI(D;;DCLCRPCR;;;AU)(D;;DCLCRPCR;;;SY)(D;;DCLCRPCR;;;BA)(A;ID;FA;;;BA)(A;ID;FA;;;SY)(A;ID;0x1301bf;;
;AU)(A;ID;0x1200a9;;;BU)(A;ID;FR;;;NS)

关于Sddl