Question : PowerShell: Convert SDDL String to Binary Security Descriptor (Get-ACL to Set-ACL)

Hey guys,

I figure someone has probably done this somewhere already and I'm probably missing something simple.

I like the SDDL Output format from Get-ACL, and would like to use that format to import a Security Descriptor using Set-ACL. To do that I believe I need to convert the SDDL String back to a Security Descriptor.

There seems to be a WMI class to do exactly this, but it's only compatible with Vista and 2008, not entirely helpful at present.

Anyone know a quick way to handle that?

Thanks,

Chris

Answer : PowerShell: Convert SDDL String to Binary Security Descriptor (Get-ACL to Set-ACL)

Get-ACL $folder
$folder.SetSecurityDescriptorSddlForm($sddl)