8,330 questions
Hi @OZ •
I invite you to take a look at this link , it talking about how use powershell to get ntfs permission :
Please don’t forget to accept helpful answer
Get-ACL doesn't show detailed permission, only ReadAndExecute for everything like read
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(310.4, 66%, 40%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EO%3C/text%3E%3C/svg%3E)
OZ
286
Reputation points
Get-ACL doesn't show detailed permission, only REadAndExecute for everything. But I need also List Permissions like in pict. and other detailed permissions for folder. I've spent several hours now and haven't been able to find an answer.
Windows for business | Windows Server | User experience | PowerShell
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(227.2, 26%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESZ%3C/text%3E%3C/svg%3E)
Sokratis Zotos 80 Reputation points2024-01-19T22:22:41.8033333+00:00 Hi, If you want to stick to native PS, then the line below might help you. If you can use an external module then I would suggest to install NTFS Security module: https://www.powershellgallery.com/packages/NTFSSecurity/4.2.4
(Get-Acl -Path Somepath).Sddl | ConvertFrom-SddlString -
OZ 286 Reputation points
2024-01-20T08:17:55.7033333+00:00 Thanks a lot!
-
OZ 286 Reputation points
2024-01-20T08:19:58.17+00:00 I don't understand. I change Permissions for user1 but the result is the same. Why?
(( (Get-Acl -Path 'C:\Users\suser\Desktop\New folder').Sddl | ConvertFrom-SddlString).DiscretionaryAcl)[0]Result: LOREAL\user1: AccessAllowed (GenericWrite, ListDirectory, Read, ReadAndExecute, ReadAttributes, ReadExtendedAttributes, ReadPermissions, Synchronize, Traverse)
-
OZ 286 Reputation points
2024-01-20T08:56:52.13+00:00 I'll try NTFS module. I will inform you later.
-
OZ 286 Reputation points
2024-01-20T09:02:44.9833333+00:00 I Installed NTFSSecurity module, looked all the commands and didnt find any command to see List permisions only. Everywhere ReadAndExecute, Synchronize
Get-NTFSEffectiveAccess 'C:\Users\suser\Desktop\New folder' -Account user1 | FL * -
Sokratis Zotos 80 Reputation points
2024-01-21T09:27:15.4+00:00 You should use the below cmdlet if you need to view permissions: And the output from my D drive:
Get-NTFSAccess -Path D:\
Sign in to comment
2 answers
Sort by: Most helpful
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(281.6, 80%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ETB%3C/text%3E%3C/svg%3E)
Thameur-BOURBITA 36,261 Reputation points Moderator2024-01-20T09:20:38.8933333+00:00 -
OZ 286 Reputation points
2024-01-20T17:23:25.0733333+00:00 I still couldn't display only List permissions. Unfortunately, I didn't find anything in your article using NTFSPermissions module.
-
Thameur-BOURBITA 36,261 Reputation points Moderator
2024-01-21T12:02:47.5033333+00:00 Hi @OZ •
I found this article in french but it explain how you can manage NTFS permission using Powershell. Please take a look:
Gérer les autorisations NTFS en PowerShell avec NTFSSecurity
Please don't forget to accept helpful answer
-
OZ 286 Reputation points
2024-01-22T07:09:26.4933333+00:00 NTFS Module also doesn't show "List folder contents". Or may be I didnt find how to show it.. Or maybe I don't understand something.
-
Thameur-BOURBITA 36,261 Reputation points Moderator
2024-01-22T13:29:26.68+00:00 Hi @OZ •
When you check only "List folder contents" , by default read and execute and read permission will be checked automatically. You can check that on Advanced permission. That's why you get Read and execute when you run
get-NTFRSSecurity -Path "c:\temp"Please don't forget to accept helpful answer
Sign in to comment -
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Anonymous2024-01-22T05:31:48.0266667+00:00 Hi OZ,
The basic List Folder Contents permission contains the advanced permissions below.
- Travers Folder/Execute File
- List Folder/ Read Data
- Read Attributes
- Read Extended Attributes,
- Read Permissions,
- Synchronize
And the Basic Read & Execute permission contains the same advanced permissions. So it's normal to have the same results.
https://www.ntfs.com/ntfs-permissions-file-folder.htm
Best Regards,
Ian Xue
If the Answer is helpful, please click "Accept Answer" and upvote it.
-
OZ 286 Reputation points
2024-01-22T07:05:48.1233333+00:00 Is it possible to see Permissions "List folder contens" only, like in the GUI. Or it's impossible?
Sign in to comment