Access and audit

Access lists come with two different types of access controls.

The discretionary access control list (DACL) is used to grant (or deny) access to a resource. The DACL is referred to as access in PowerShell.

The system access control list (SACL) is used to define which activities should be audited. The SACL is referred to as audit in PowerShell.

Reading and setting the audit ACL requires administrator privileges (run as administrator). Get-Acl will only attempt to read the audit ACL if it is explicitly requested. The -Audit switch parameter is used to request the list:

Get-Acl C:TempACL1 -Audit | Format-List 

As none of the folders created have audit ACLs at this time, the -Audit property will be blank.

..................Content has been hidden....................

You can't read the all page of ebook, please click here login for view all page.
Reset
13.59.243.194