Skip to content

Get‑ServiceSecurityDescriptor

raandree edited this page Sep 6, 2026 · 1 revision

SYNOPSIS

Gets selected security descriptor sections from local services or the SCM.

SYNTAX

Service (Default)

Get-ServiceSecurityDescriptor [-Name] <Object[]> [-Sections <WindowsSecurityDescriptorSection>]
 [-ThrottleLimit <Int32>] [<CommonParameters>]

ServiceControlManager

Get-ServiceSecurityDescriptor [-ServiceControlManager] [-Sections <WindowsSecurityDescriptorSection>]
 [-ThrottleLimit <Int32>] [<CommonParameters>]

DESCRIPTION

Reads owner, group, DACL, or SACL sections from local named services or the explicit local Service Control Manager target and returns portable SDDL.

EXAMPLES

EXAMPLE 1

Get-Service BITS | Get-ServiceSecurityDescriptor -Sections Access

Gets the BITS service DACL through a ServiceController pipeline object.

PARAMETERS

-Name

One or more local service names, ServiceController objects, or module outputs.

Type: Object[]
Parameter Sets: Service
Aliases: ServiceName

Required: True
Position: 1
Default value: None
Accept pipeline input: True (ByPropertyName, ByValue)
Accept wildcard characters: False

-Sections

Selects owner, group, access, audit, or any combination to retrieve.

Type: WindowsSecurityDescriptorSection
Parameter Sets: (All)
Aliases:
Accepted values: Owner, Group, Access, Audit, All

Required: False
Position: Named
Default value: All
Accept pipeline input: False
Accept wildcard characters: False

-ServiceControlManager

Selects the local Service Control Manager instead of a named service.

Type: SwitchParameter
Parameter Sets: ServiceControlManager
Aliases:

Required: True
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False

-ThrottleLimit

Limits concurrently processed canonical targets. One requests deterministic sequential execution.

Type: Int32
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: [Math]::Max(1, [Math]::Min(8, [Environment]::ProcessorCount))
Accept pipeline input: False
Accept wildcard characters: False

CommonParameters

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

INPUTS

System.String

System.ServiceProcess.ServiceController

OUTPUTS

WindowsAccessControl.ServiceSecurityDescriptor

WindowsAccessControl.ServiceControlManagerSecurityDescriptor

NOTES

RELATED LINKS

Home

Commands

DSC resources

Clone this wiki locally