Home

WindowsAccessControl

^{WindowsAccessControl v0.3.0}

WindowsAccessControl is a Windows PowerShell module for pipeline-first management of Windows security descriptors. Its filesystem, registry-key, service/SCM, live-process, SMB-share, Active Directory, Task Scheduler, and certificate private-key commands turn common DACL, SACL, owner, inheritance, backup, and effective-access operations into composable commands without requiring callers to manipulate .NET access-control objects directly.

The command and DSC resource pages in this wiki are generated from the module itself on every release. They come from the comment-based help in the source, so they describe the version that is published rather than a separately maintained copy.

Please leave comments, feature requests, and bug reports in the issues section for this module.

Getting started

Install from the PowerShell Gallery:

Install-Module -Name WindowsAccessControl -Scope CurrentUser

Confirm the installation and list the commands:

Get-Command -Module WindowsAccessControl

List the DSC resources the module exports:

Get-DscResource -Module WindowsAccessControl

Where to look next

• The command pages in the sidebar document every public command, its parameters, and its examples.
• The DSC resource pages in the sidebar document every resource and its properties. The Desired State Configuration section of the README explains how the resources are meant to be used together.
• docs/usage-guide.md walks through the common tasks and links to a page for each object family.
• The docs/ index lists every guide.
• docs/migration-from-ntfssecurity.md maps every NTFSSecurity command to its replacement and explains what changes when a script moves over.
• The specs/ folder records the accepted behavior, including the cases the module deliberately refuses.

Requirements

The module has no third-party runtime dependency. It supports Windows PowerShell 5.1 and PowerShell 7, on Windows only.

Change log

A full list of changes in each version can be found in the change log.