Пользователи и разрешения

$result = Get-LocalUser | Select-Object Name,Enabled,LastLogon
$items = @($result)
[pscustomobject]@{ Count=$items.Count; First=$items | Select-Object -First 1; IsNull=($null -eq $result) }

$pw=Read-Host "Password" -AsSecureString
New-LocalUser -Name demo -Password $pw -WhatIf

$result = Get-LocalGroup -SID S-1-5-32-544
$summary = [ordered]@{ IsNull=($null -eq $result); Count=@($result).Count }
if($null -ne $result){$summary.Type=$result.GetType().FullName};[pscustomobject]$summary

$acl=Get-Acl .\data.txt
$acl | Select-Object Owner,AreAccessRulesProtected,Access

$acl=Get-Acl .\data
$rule=[Security.AccessControl.FileSystemAccessRule]::new("Users","Read","ContainerInherit,ObjectInherit","None","Allow")
$acl.AddAccessRule($rule)
Set-Acl .\data $acl -WhatIf

(Get-Acl .\data).Access | Format-Table IdentityReference,AccessControlType,FileSystemRights,IsInherited

$acl=Get-Acl .\data
$acl.SetAccessRuleProtection($true,$true)

$result = [Security.AccessControl.InheritanceFlags]"ContainerInherit, ObjectInherit"
$summary = [ordered]@{ IsNull=($null -eq $result); Count=@($result).Count }
if($null -ne $result){$summary.Type=$result.GetType().FullName};[pscustomobject]$summary

$result = Get-ChildItem .\root -Directory -Recurse | Where-Object {(Get-Acl $_).AreAccessRulesProtected}
$shape = if($null -eq $result){'<null>'}elseif($result -is [array]){'array'}else{$result.GetType().Name}
[pscustomobject]@{ Shape=$shape; Values=@($result) }

$before=(Get-Acl .\data).Sddl
# изменение
$after=(Get-Acl .\data).Sddl

[pscustomobject]@{Target=$path;Actor=[Environment]::UserName;Before=$before;After=$after;At=[datetimeoffset]::UtcNow}

$acl = Get-Acl .\reports
$rule = [Security.AccessControl.FileSystemAccessRule]::new('CONTOSO\Analysts','ReadAndExecute','ContainerInherit,ObjectInherit','None','Allow')
$exists = $acl.Access | Where-Object { $_.IdentityReference -eq $rule.IdentityReference -and $_.FileSystemRights -eq $rule.FileSystemRights -and $_.AccessControlType -eq $rule.AccessControlType }
if(-not $exists){ $acl.AddAccessRule($rule); Set-Acl .\reports $acl }

whoami /groups
(Get-Acl .\data).Access

$a=(Get-Acl $p1).Sddl;$b=(Get-Acl $p2).Sddl;Compare-Object $a $b
$valueType = if($null -eq $a){'<null>'}else{$a.GetType().FullName}
[pscustomobject]@{ Value=$a; Type=$valueType; Count=@($a).Count }

# Сценарий для ревью: Сценарий не находит локальный модуль.
$path = '.\incoming\data.csv'
$hashBefore = (Get-FileHash -LiteralPath $path).Hash
$rows = Import-Csv -LiteralPath $path
$hashAfter = (Get-FileHash -LiteralPath $path).Hash
[pscustomobject]@{ Rows=$rows.Count; Stable=($hashBefore -eq $hashAfter); Culture=[cultureinfo]::CurrentCulture.Name }