Powershell command to disable the .ssh folder to other users

Question

I have created the folder in the windows agent with the .ssh keys using admin i want to disable it for the other users who logged into system. i tried using GetCL commands but got confused how to use it in the automation. Any suggestions please

Answer 1

Just use icacls.exe in your Powershell script to disable inheritance (if there is any) and set the permissions to whatever suits your requirements.

https://4sysops.com/archives/icacls-list-set-grant-remove-and-deny-permissions/

https://adamtheautomator.com/icacls/

Maybe like this:

icacls.exe c:\temp\test /inheritance:r /grant administrators:(OI)(CI)(F)