Get and Set Security Groups

[ErikJan]

Looking for a script (or VBA code?) where I can:
(1) Get the security applied to files and folders. So I mean per file, the people and groups who have access and what type of access
(2) Set the security to certain people and groups. E.g. Jim and Sara get Read/Write and the Users1 group get Read Only

For the latter, I'd like to be able to re-apply at the top level and restore inheritance downward so I only need to call this once and then all files and folders below get the new security settings applied.

[HansV]

I'm not into this kind of stuff, but perhaps the following will help:

Active Directory Administration with Windows PowerShell
Get-ADGroupMember
Add-ADGroupMember

[ErikJan]

I don't want to change security groups themselves, I only want to SEE what is applied for each file/folder and (later) I want to apply certain groups and users to files.

So in the picture I want to see which "Group or user names" are in effect for this file and for each group I want to see what the permissions are (and change these separately).
It's easy by hand using the "Security" tab but can I automate this in e.g. VBA?

Projects 2017.xlsx Properties.png

.

[HansV]

You may have better luck asking your question in Microsoft's PowerShell Forum.

[John Gray]

Wading through displayed permissions is immensely tedious because there is so much data produced.

Google for "NTFS Permissions Reporter" and take your pick!

[ErikJan]

ICACLS seems interesting

[John Gray]

ICACLS is the successor to CACLS, both being "built-in" utilities.

It took me quite some time to understand the bizarre nature of their parameters!

[ErikJan]

icacls <folder> /reset /T Would reset everything
icacls <folder> /T Would list everything

At least, that how it seems... Guess I can start playing with this.