asked on

powershell script to add AD group to a large folder share near 2TB

hi there ,
is there a generic powershell script to add to a large windows file share to add an active directory group to a large sized file share shared from a unix device called a nexstor , but the folder permissions will be via NTFS , so basically we would need to add this AD group to the share via powershell , is this available ?

Alex

Yes

Set-ACL, but I don't understand why you want to use powershell for this, it'll still take as long as doing it via a GUI. Your question isn't detailed enough, what are you actually trying to achieve here?

Thanks
Alex

Qlemo

Do you want to change the share or folder permissions?
Are there specific privileges set on files, or do they all inherit everything?

jonathan ahemed

ASKER

basically when try to add this permission via windows explorer , I get a network timeout error and stops , or continued prompt for access denied on some folders , folder size is near 2TB , basically the share is shared from a Unix based nexstor and I want to add in modify permission on the folder , the ad group is from a different trusted domain a and and trying this on domain B say , does this make sense ?

Qlemo

Just don't apply the changes to files and subfolders, then you should be set within seconds.

jonathan ahemed

ASKER

ok do you have a copy of the script to run , want to apply to files and subfolders, I was trying something like

$acl = $acl = (Get-Item $path).GetAccessControl('Access') \\server\fileshare

$AccessRule = New-Object System.Security.AccessControl.FileSystemAccessRule("domain\group","Modify","Allow")

$acl.SetAccessRule($AccessRule)

$acl | Set-Acl \\server\fileshare

this times out or takes an age to apply