Skip to content

WindowsAccessControlSmbShareAccessRule

raandree edited this page Sep 6, 2026 · 1 revision

Parameters

Parameter Attribute DataType Description Allowed Values
AccessControlType Key System.Security.AccessControl.AccessControlType Whether the entry is an allow or a deny entry. Allow, Deny
AccessRights Key WindowsSmbShareRights The exact share rights the entry grants or denies. Delete, ReadControl, WriteDac, WriteOwner, Synchronize, Read, Change, Full, AccessSystemSecurity, GenericAll, GenericExecute, GenericWrite, GenericRead
Account Key System.String The principal the rule applies to. An alias is normalized by security identifier, so any spelling that resolves to the same principal matches.
Name Key System.String The name of the local share the rule applies to.
Ensure Write WindowsAccessControlDscEnsure Whether the exact entry must be present or absent. Defaults to Present. Absent, Present
Reasons Read WindowsAccessControlDscReason[] Returns why the resource is not in the desired state. Not configurable.

Description

The composite key identifies exactly one explicit access control entry on a local share by share name, account, rights, and qualifier. This resource manages the share access control list only; the file system permissions behind the share are a separate target.

Home

Commands

DSC resources

Clone this wiki locally