Get the Access Control List (permissions) for a file or registry key.
Syntax
get-acl [[-Path] path [] ] [-Filter String]
[-Include String] [-Exclude String]
[-Audit []] [CommonParameters]
Key
-Path path The path to the item {may be piped}
-Filter String Filter elements as required and supported by providers
-Include String Item(s) upon which Get-acl will act, wildcards are permitted
-Exclude String Item(s) upon which Get-acl is not to act
-Audit Retrieve audit data from the SACL
common parameters: -Verbose,-Debug,-ErrorAction,-ErrorVariable,-OutVariable
Examples
Get ACL information for the Windows directory:
PS C:\>get-acl C:\windows
Get ACL information for C:\Windows expanding the individual ACEs (access control entries)
PS C:\>$mywin = get-acl -path "c:\windows" | select -expand access
PS C:\>$mywin[0]
Get ACL information for all of the .log files in the Windows directory beginning with k.
Display output as a table showing the Path and the owner of each file:
PS C:\>get-acl C:\Windows\k*.log | format-table Path,owner
Retrieve HKLM\SYSTEM\CurrentControlSet\Control from the registry:
PS C:\>get-acl -path hklm:\system\currentcontrolset\control | format-list
"Whether a pretty woman grants or withholds her favours, she always likes to be asked for them" - Ovid (Ars Amatoria)
Related PowerShell Commands:
set-acl - Set permissions
