If you try and modify the ACL via PowerShell but the command RemoveAccessRule is not working, by that I mean you run it no errors come up but the rules and not being removed. The problem is that inheritance is turned on and you are trying to remove a rule that is obtained from inheritance. To fix this problem you first need to disable inheritance, save the rule and then get the acls again. After that remove will work. Code can be found below:
|
1
2
3
4
5
6
7
8
9
10
|
$datadiskpath = "D:\MyData"
mkdir $datadiskpath
$acl = Get-ACL -Path $datadiskpath
$acl.SetAccessRuleProtection($True, $True)
Set-Acl -Path $datadiskpath -AclObject $acl
$acl = Get-ACL -Path $datadiskpath
$acl.Access | Where-Object {$_.IdentityReference -eq "BUILTIN\Users"} | Foreach-Object {$acl.RemoveAccessRule($_) | Out-Null}
Set-Acl -Path $datadiskpath -AclObject $acl
|