How to change or add permission of a file or folder using sccm

Question

Hi,

I want to add "everyone" permission to a file or folder and give him full access using sccm.
Is there any way to that? I have 140 Clients.

Regards

Answer 1

Hi @MPEG ,

Agree with Jason, the PowerShell “set-acl” cmdlet is used to change the security descriptor of a specified item, such as a file, folder or a registry key; in other words, it is used to modify file or folder permissions. The following script sets the “FullControl” permission to “Allow” for the user “ENTERPRISE\T.Simpson” to the folder “Sales”:

$acl = Get-Acl \fs1\shared\sales

$AccessRule = New-Object System.Security.AccessControl.FileSystemAccessRule("ENTERPRISE\T.Simpson","FullControl","Allow")

$acl.SetAccessRule($AccessRule)

$acl | Set-Acl \fs1\shared\sales

We could modify the example and deploy it as package to the client, and about the detail of how to manage file system ACLs with PowerShell Scripts, please refer to this article:
https://blog.netwrix.com/2018/04/18/how-to-manage-file-system-acls-with-powershell-scripts/
Note: Non-Microsoft link, just for the reference.

---

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

There's nothing built- into ConfigMgr to control file or folder permissions on managed devices. However, you can easily create a PowerShell script to do this and push this out using ConfigMgr. Alternatively, you can create a package and program in ConfigMgr that runs cacls or icacls that configures permissions on files and folders.