using Alphaleonis.Win32.Filesystem; using Security2; using System; using System.Management.Automation; namespace NTFSSecurity { [Cmdlet(VerbsLifecycle.Enable, "NTFSAuditInheritance", DefaultParameterSetName = "Path")] public class EnableAuditInheritance : BaseCmdletWithPrivControl { private bool removeExplicitAccessRules; private bool passThru; [Parameter(Position = 1, ValueFromPipeline = true, ValueFromPipelineByPropertyName = true, ParameterSetName = "Path")] [ValidateNotNullOrEmpty] [Alias("FullName")] public string[] Path { get { return paths.ToArray(); } set { paths.Clear(); paths.AddRange(value); } } [Parameter(Mandatory = true, Position = 1, ValueFromPipeline = true, ValueFromPipelineByPropertyName = true, ParameterSetName = "SecurityDescriptor")] [ValidateNotNullOrEmpty] public FileSystemSecurity2[] SecurityDescriptor { get { return securityDescriptors.ToArray(); } set { securityDescriptors.Clear(); securityDescriptors.AddRange(value); } } [Parameter] public SwitchParameter PassThru { get { return passThru; } set { passThru = value; } } [Parameter] public SwitchParameter RemoveExplicitAccessRules { get { return removeExplicitAccessRules; } set { removeExplicitAccessRules = value; } } protected override void BeginProcessing() { base.BeginProcessing(); EnableFileSystemPrivileges(true); } protected override void ProcessRecord() { if (ParameterSetName == "Path") { foreach (var path in paths) { FileSystemInfo item = null; try { item = GetFileSystemInfo2(path); } catch (Exception ex) { WriteError(new ErrorRecord(ex, "ReadFileError", ErrorCategory.OpenError, path)); continue; } try { FileSystemInheritanceInfo.EnableAuditInheritance(item, removeExplicitAccessRules); } catch (UnauthorizedAccessException) { try { var ownerInfo = FileSystemOwner.GetOwner(item); var previousOwner = ownerInfo.Owner; FileSystemOwner.SetOwner(item, System.Security.Principal.WindowsIdentity.GetCurrent().User); FileSystemInheritanceInfo.EnableAuditInheritance(item, removeExplicitAccessRules); FileSystemOwner.SetOwner(item, previousOwner); } catch (Exception ex2) { WriteError(new ErrorRecord(ex2, "ModifySdError", ErrorCategory.WriteError, path)); continue; } } catch (Exception ex) { WriteError(new ErrorRecord(ex, "ModifySdError", ErrorCategory.WriteError, path)); continue; } finally { if (passThru) { FileSystemInheritanceInfo.GetFileSystemInheritanceInfo(item); } } } } else { foreach (var sd in securityDescriptors) { FileSystemInheritanceInfo.EnableAuditInheritance(sd, removeExplicitAccessRules); if (passThru) { FileSystemInheritanceInfo.GetFileSystemInheritanceInfo(sd); } } } } } }