WindowsAccessControlTaskFolderSecurityDescriptor

Parameters

Parameter	Attribute	DataType	Description	Allowed Values
Path	Key	System.String	The task folder whose DACL is managed.
Sections	Key	WindowsSecurityDescriptorSection	The security descriptor sections this resource owns. Only the access section is supported for a task folder.	Owner, Group, Access, Audit, All
AllowedRootPath	Required	System.String	The task folder subtree the configuration is allowed to write under. A target outside it is refused before anything is written.
Sddl	Required	System.String	The desired DACL in SDDL form. Capture it from Get-TaskFolderSecurityDescriptor.
Reasons	Read	WindowsAccessControlDscReason[]	Returns why the resource is not in the desired state. Not configurable.

Description

Compares the task folder's access control list against the desired SDDL and rewrites it. Access control entry order is ignored during comparison because the Task Scheduler service canonicalizes it after a write, so this resource cannot detect a reordering that moves an allow entry ahead of a deny entry. Do not make it the sole drift control for an order-sensitive deny entry.