https://blogs.msmvps.com/erikr/2007/09/26/set-permissions-on-a-specific-service-windows/
Get-Acl .LISA.BackOffice.log | Format-List
Path : Microsoft.PowerShell.CoreFileSystem::D:ChuckLuGitEdenredLISA_5.0.0.0LISA.BackOfficelogLISA.BackOffice.
log
Owner : NT AUTHORITYNETWORK SERVICE
Group : NT AUTHORITYNETWORK SERVICE
Access : NT AUTHORITYAuthenticated Users Deny Write
NT AUTHORITYSYSTEM Deny Write
BUILTINAdministrators Deny Write
BUILTINAdministrators Allow FullControl
NT AUTHORITYSYSTEM Allow FullControl
NT AUTHORITYAuthenticated Users Allow Modify, Synchronize
BUILTINUsers Allow ReadAndExecute, Synchronize
NT AUTHORITYNETWORK SERVICE Allow Read, Synchronize
Audit :
Sddl : O:NSG:NSD:AI(D;;DCLCRPCR;;;AU)(D;;DCLCRPCR;;;SY)(D;;DCLCRPCR;;;BA)(A;ID;FA;;;BA)(A;ID;FA;;;SY)(A;ID;0x1301bf;;
;AU)(A;ID;0x1200a9;;;BU)(A;ID;FR;;;NS)
关于Sddl