How to set and modify folder permissions in Active Directory?

Read on to know how to modify file/folder permissions and ACL in Active Directory using PowerShell and how you can get it done easily with ADManager Plus.

Windows PowerShell

  • Identify the domain in which the folder whose permissions are to be modified is located.
  • Create and compile the script for modifying the folder access permisisons for the AD account. Execute the script in PowerShell.
  • Sample script for modifying NTFS permissions of an AD account:
 Copied
$acllist = Get-Acl \\fs1\shared\sales
$AccessRule = New-Object System.Security.AccessControl.FileSystemAccessRule("Sales\Ashley","FullControl","Allow")
$acl.SetAccessRule($AccessRule)
$acllist | Set-Acl \\ft2\shared\sales
Click to copy entire script

ADManager Plus

  • Navigate to Management > File Server Management > Modify NTFS Permissions.
  • Select the Domain,Folders, User Accounts you wish to modify, Type of Permissions and inheritance. Click Apply.

Screenshot

» Start 30-day Free Trial

Although modifying NTFS permissions for AD accounts with native tools like PowerShell looks simple, it comes with a few limitations:

  • The PowerShell script can be run only from the computers which have the Active Directory Domain Services role installed in them.
  • Need for a new script, in case NTFS permissions for multiple accounts are needed.
  • The syntax, parameters and iterations need to be correct. A typo or incorrect syntax might be difficult to spot and rectify, especially when the script is a long one.
  • Cannot delegate the modification of permissions for folder and AD accounts or other AD management tasks to help desk technicians.

ADManager Plus lets you perform the same with a few clicks from its web-based GUI console. It also has options for viewing the access control lists for folders with it's pre-built reports with on-the-fly management that lets you modify the permissions right from the report. You can learn more about it here.

Gain complete control over NTFS permissions and file shares with purpose-built reports.

  Get 30-day free trial.

Embark on your script-free AD management, reporting, and automation journey with ADManager Plus.

  •  
     
  • By submitting you agree to processing of personal data according to the Privacy Policy.

Thanks

Your download should begin automatically in 15 seconds. If not, click here to download manually.

Related Powershell How-to Guides:

The one-stop solution toActive Directory Management and Reporting

Email Download Link Email the ADManager Plus download link