PowerTip: Use PowerShell to Find Non-Inherited Access to a Folder

Summary: Learn how to use Windows PowerShell to find non-inherited access rights to a folder.

Hey, Scripting Guy! Question How can I find non-inherited access rights to a folder by using Windows PowerShell?

Hey, Scripting Guy! Answer Use the Get-Item cmdlet to select the folder, and pipe it to the Get-ACL cmdlet. Choose the Access property, and filter the results based on an inheritance flag equal to none. This technique is shown here for the C:\fso folder (? Is an alias for the Where-Object).

(Get-Item c:\fso | get-acl).Access | ? inheritanceflags -eq 'none'


Comments (2)

  1. BUBBA says:

    I found it useful to use the .IsInherited method. returns $false or $true.

  2. Dave S says:

    Thanks! I am seeing an issue where a user moves a file from one folder to another but the inherited security from the destination does not apply to the file. This is an occasional problem. Is there a way to use get-acl that shows a file or folder that
    is not accessible by a security group?

Skip to main content