{"id":391,"date":"2017-08-16T14:21:08","date_gmt":"2017-08-16T12:21:08","guid":{"rendered":"https:\/\/itblogwildi.wordpress.com\/?p=391"},"modified":"2017-08-16T14:21:08","modified_gmt":"2017-08-16T12:21:08","slug":"powershell-erstelle-verzeichnisse-pro-benutzer-aus-ad-und-setze-berechtigungen","status":"publish","type":"post","link":"https:\/\/itblog.wildi.dk\/?p=391","title":{"rendered":"PowerShell: Erstelle Verzeichnisse pro Benutzer aus AD, und setze Berechtigungen"},"content":{"rendered":"

Obige Anforderung wurde an mich gestellt. Wie immer «quick and dirty».<\/p>\n

Das Script basiert auf den Modulen «NTFSSecurity» (File System Security PowerShell Module<\/a>), danke schonmal daf\u00fcr.<\/p>\n

Beschrieben ist das ganze gut auf der Technet-Gallery Seite, und hier<\/a>.<\/p>\n

Das Module habe ich unter\u00a0C:\\Program Files\\WindowsPowerShell\\Modules «installiert» (simples Filecopy). Danach kann das Modul via<\/p>\n

Import-Module NTFSSecurity<\/pre>\n
importiert werden.<\/p>\n
Mein Script sieht wie folgt aus:<\/p>\n
# Create Folders based on a AD OU\n# Scripted by M. Wildi, IN4OUT it solutions ag, 5000 Aarau\n# v 1.0 16.08.2017\n# ###########################################################################\n# Import Module\n# Module from https:\/\/gallery.technet.microsoft.com\/scriptcenter\/1abd77a5-9c0b-4a2b-acef-90dbb2b84e85\nImport-Module NTFSSecurity\n\n# set Variables\n$CustClass = \"DT2017\"\n$CustRootDir = \"\\\\FILESERVER\\Share\\share\\root\\\"\n$CustDir = $CustRootDir + $CustClass\n# Create Base Dirs\nmd $CustDir\nmd $CustDir\\_Public\n\n# Set Permissions\nGet-Item $CustDir | Disable-NTFSAccessInheritance\nGet-NTFSAccess $CustDir | Where-Object {$_.Account -like \"DOMAIN\\GROUP\"} | Remove-NTFSAccess\nGet-Item $CustDir | Add-NTFSAccess -Account \"DOMAIN\\$CustClass\" -AccessRights ReadAndExecute -AppliesTo ThisFolderSubfoldersAndFiles\n\nGet-Item $CustDir\\_Public| Disable-NTFSAccessInheritance\nGet-NTFSAccess $CustDir\\_Public| Where-Object {$_.Account -like \"DOMAIN\\GROUP\"} | Remove-NTFSAccess\nGet-Item $CustDir\\_Public| Add-NTFSAccess -Account \"DOMAIN\\$CustClass\" -AccessRights FullControl -AppliesTo ThisFolderSubfoldersAndFiles\nGet-Item $CustDir\\_Public| Add-NTFSAccess -Account \"DOMAIN\\GROUP2\" -AccessRights FullControl -AppliesTo ThisFolderSubfoldersAndFiles\n\nGet-ADUser -Filter * -SearchBase \"OU=$CustCLass,OU=OU1,OU=Users,OU=CUSTOMER,DC=CUSTOMER,DC=intern\" -Properties * | \nForEach-Object {\nmd $CustDir\\$($_.SamAccountName)\nGet-Item $CustDir\\$($_.SamAccountName) | Disable-NTFSAccessInheritance\nGet-NTFSAccess $CustDir\\$($_.SamAccountName) | Where-Object {$_.Account -like \"DOMAIN\\$CustClass\"} | Remove-NTFSAccess\nGet-Item $CustDir\\$($_.SamAccountName) | Add-NTFSAccess -Account \"DOMAIN\\$($_.SamAccountName)\" -AccessRights FullControl -AppliesTo ThisFolderSubfoldersAndFiles\nGet-Item $CustDir\\$($_.SamAccountName) | Add-NTFSAccess -Account \"DOMAIN\\GROUP2\" -AccessRights FullControl -AppliesTo ThisFolderSubfoldersAndFiles\n}<\/pre>\n","protected":false},"excerpt":{"rendered":"
Obige Anforderung wurde an mich gestellt. Wie immer «quick and dirty». Das Script basiert auf den Modulen «NTFSSecurity» (File System… Read more<\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[3,5,29],"tags":[],"class_list":["post-391","post","type-post","status-publish","format-standard","hentry","category-active-directory","category-allgemein","category-powershell"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t