[仅使用powershell的单用户的NTFS权限

Question

我正在尝试为每个AD用户创建用户文件夹。对于每个文件夹，我只希望该AD用户仅访问该文件夹。

我想要的最终结果： FolderName：“ UserAFolder” 目标：“ UserAFolder”中只有UserA

但是结果是 FolderName：“ UserAFolder” UserA，UserB，UserC ...都在“ UserAFolder”中

    $folderpath = "\\san\Shares\UserFolders\"
    $ulist =import-csv -Path C:\aduserlist.csv 
    foreach($list in $ulist)
    {
        $users = $list.username
        $newpath = $folderpath+$users
        New-Item -ItemType Directory -Path $folderpath -Name $users 
        $rights = "Modify"
        $inheritanceFlag = "ContainerInherit,ObjectInherit"
        $propagationFlag = "None"
        $type = "Allow"
        $objACL = Get-Acl $newpath 
        $entries = $users, $rights,$inheritanceFlag,$propagationFlag,$type
        $rule = New-Object -TypeName System.Security.AccessControl.FileSystemAccessRule -ArgumentList $entries
        $objACL.SetAccessRule($rule)
        $objACL | Set-Acl -Path $newpath 
    }

Answer 1

ACL的原始代码有效。只是父文件夹继承问题。NTFS安全性

$folderpath = "\\san\Shares\UserFolders\" 
$ulist =import-csv -Path C:\aduserlist.csv

foreach($list in $ulist){
    $users = $list.username
    $newpath = $folderpath+$users
    New-Item -ItemType Directory -Path $folderpath -Name $users
    $users = $list.username
    $ADUser = $list.email
    $newpath = $folderpath+$users
    Add-NTFSAccess $newpath -Account $ADUser -AccessRights Modify -PassThru

}