check permission on folder network

Question

Hi,
I have network folders that I noticed the admin group does not have permissions on. I wanted to run the script to check which web folders are not allowed - but I could not:

ForEach ($Folder in $FolderPath) {
$Acl = Get-Acl -Path $Folder.FullName
ForEach ($Access in $Acl.Access) {
$Properties = [ordered]@{'Folder Name'=$Folder.FullName;'Group/User'=$Access.IdentityReference;'Permissions'=$Access.FileSystemRights;'Inherited'=$Access.IsInherited}
New-Object -TypeName PSObject -Property $Properties
}
}

I use it - but can only filter by group.
That is - hunt me for all the folders that the group of managers does not have permission for

Answer 1

Hi，

Please see if this works for you

$group = "domain\helpdesk"  
$folders = @()  
ForEach ($Folder in $FolderPath) {  
    $NoPermission  = $true  
    $Acl = Get-Acl -Path $Folder.FullName  
    ForEach ($Access in $Acl.Access) {  
        if($Access.IdentityReference.Value -eq $group){  
            $NoPermission = $false  
        }   
    }  
    if($NoPermission){  
        $folders += $Folder  
    }  
}  

Best Regards，
Ian

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Hi,

What do you mean by the group of managers? The administrators group？

Best Regards，
Ian

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 3

Sample user group - a group that has members in the domain
for example :
domain\helpdesk

Answer 4

I need to find all the network folders of the group: "domain\helpdesk" no permission on them