<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Compliance check of NTFS permission on the vCenter server in VMware PowerCLI Discussions</title>
    <link>https://communities.vmware.com/t5/VMware-PowerCLI-Discussions/Compliance-check-of-NTFS-permission-on-the-vCenter-server/m-p/2915020#M107089</link>
    <description>&lt;P&gt;Hi LucD,&lt;/P&gt;&lt;P&gt;Sorry to pull you on the old thread. I am just trying something similar which is mentioned in the thread.&lt;/P&gt;&lt;P&gt;I am trying to get list of users mentioned in the share tab of the folder security advanced settings but unable to&amp;nbsp; get exact cmdlet. (see below snippet). Looking for the information which is highlighted in yellow.&amp;nbsp;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Get-Acl -Path "\\share\folder1"&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="vin01_0-1655742134066.png" style="width: 400px;"&gt;&lt;img src="https://communities.vmware.com/t5/image/serverpage/image-id/95869iBDD89C12D6C2D42F/image-size/medium/is-moderation-mode/true?v=v2&amp;amp;px=400" role="button" title="vin01_0-1655742134066.png" alt="vin01_0-1655742134066.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Mon, 20 Jun 2022 16:24:00 GMT</pubDate>
    <dc:creator>vin01</dc:creator>
    <dc:date>2022-06-20T16:24:00Z</dc:date>
    <item>
      <title>Compliance check of NTFS permission on the vCenter server</title>
      <link>https://communities.vmware.com/t5/VMware-PowerCLI-Discussions/Compliance-check-of-NTFS-permission-on-the-vCenter-server/m-p/2137611#M69310</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;I am being asked to write a compliance script, part of it being a check against the NTFS permissions for the folder that holds the vCenter certificates to ensure correct access&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Has anyone done this? Any ideas how best to tackle this?&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Any help appreciated&lt;/P&gt;&lt;P&gt;Thanks &lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Sun, 21 Apr 2013 10:12:23 GMT</pubDate>
      <guid>https://communities.vmware.com/t5/VMware-PowerCLI-Discussions/Compliance-check-of-NTFS-permission-on-the-vCenter-server/m-p/2137611#M69310</guid>
      <dc:creator>js40687</dc:creator>
      <dc:date>2013-04-21T10:12:23Z</dc:date>
    </item>
    <item>
      <title>Re: Compliance check of NTFS permission on the vCenter server</title>
      <link>https://communities.vmware.com/t5/VMware-PowerCLI-Discussions/Compliance-check-of-NTFS-permission-on-the-vCenter-server/m-p/2137612#M69311</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;The NTFS permissions on the SSL folder (C:\ProgramData\VMware\VMware VirtualCenter\SSL) are normally inherited from the parent folder.&lt;/P&gt;&lt;P&gt;There could be other permission that come from other components. For example some backup tools run under a service account that also needs some access.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;What do you want to check in fact ?&lt;/P&gt;&lt;P&gt;Is there a file that contains the permissions that should be there ?&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Wouldn't it be easier to activate auditing on that folder (success and failure) ?&lt;/P&gt;&lt;P&gt;In that case you detect any changes from the security eventlog ?&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Sun, 21 Apr 2013 11:17:50 GMT</pubDate>
      <guid>https://communities.vmware.com/t5/VMware-PowerCLI-Discussions/Compliance-check-of-NTFS-permission-on-the-vCenter-server/m-p/2137612#M69311</guid>
      <dc:creator>LucD</dc:creator>
      <dc:date>2013-04-21T11:17:50Z</dc:date>
    </item>
    <item>
      <title>Re: Compliance check of NTFS permission on the vCenter server</title>
      <link>https://communities.vmware.com/t5/VMware-PowerCLI-Discussions/Compliance-check-of-NTFS-permission-on-the-vCenter-server/m-p/2137613#M69312</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Thanks for the quick reply as always Luc&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Our Security dept, as Security depts do......have asked I produce a single script that checks many things&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;I guess they want to ensure that no-one has access to the certs that shouldn’t&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Whilst enabling Auditing would seem the most appropriate I just wanted to see how difficult it would be to do a scripted check&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;It would be the permissions on the cert file itself they are interested in, not so much the folder, I could specify the perms that should be there to check against&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Cheers&lt;/P&gt;&lt;P&gt;Jim&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Mon, 22 Apr 2013 08:38:52 GMT</pubDate>
      <guid>https://communities.vmware.com/t5/VMware-PowerCLI-Discussions/Compliance-check-of-NTFS-permission-on-the-vCenter-server/m-p/2137613#M69312</guid>
      <dc:creator>js40687</dc:creator>
      <dc:date>2013-04-22T08:38:52Z</dc:date>
    </item>
    <item>
      <title>Re: Compliance check of NTFS permission on the vCenter server</title>
      <link>https://communities.vmware.com/t5/VMware-PowerCLI-Discussions/Compliance-check-of-NTFS-permission-on-the-vCenter-server/m-p/2137614#M69313</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;The following gives you the NTFS permissions on the files in the SSL folder.&lt;/P&gt;&lt;P&gt;It assumes that the admiistrative share C$ is there, and that the account under which you execute the script has access to that share.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;An alternative would be to use the Invoke-VMSCript cmdlet, provided the vCenter is a VM.&lt;/P&gt;&lt;P&gt;Another alternative is to use PowerShell remoting, but that requires WinRM to be configured.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;PRE&gt;&lt;SPAN style="color: #800080;"&gt;$vCenter&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt; &lt;/SPAN&gt;&lt;SPAN style="color: #FF0000;"&gt;=&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt; &lt;/SPAN&gt;&lt;SPAN style="color: #800080;"&gt;$global:DefaultVIServer&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt;.&lt;/SPAN&gt;&lt;SPAN style="color: #8B4513;"&gt;Name&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt;
&lt;/SPAN&gt;&lt;SPAN style="color: #800080;"&gt;$acl&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt; &lt;/SPAN&gt;&lt;SPAN style="color: #FF0000;"&gt;=&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt; &lt;/SPAN&gt;&lt;SPAN style="color: #5F9EA0;"&gt;Get-ChildItem&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt; &lt;/SPAN&gt;&lt;SPAN style="color: #800000;"&gt;"\\$($vCenter)\c$\ProgramData\VMware\VMware VirtualCenter\SSL"&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt; &lt;/SPAN&gt;&lt;SPAN style="color: #5F9EA0;"&gt;-recurse&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt; &lt;/SPAN&gt;&lt;SPAN style="color: #0000FF;"&gt;|&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt; &lt;/SPAN&gt;&lt;SPAN style="color: #5F9EA0;"&gt;Get-Acl&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt; &lt;BR /&gt;&lt;BR /&gt;&lt;/SPAN&gt;&lt;SPAN style="color: #0000FF;"&gt;foreach&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt;(&lt;/SPAN&gt;&lt;SPAN style="color: #800080;"&gt;$file&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt; &lt;/SPAN&gt;&lt;SPAN style="color: #0000FF;"&gt;in&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt; &lt;/SPAN&gt;&lt;SPAN style="color: #800080;"&gt;$acl&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt;){
&amp;nbsp; &lt;/SPAN&gt;&lt;SPAN style="color: #800080;"&gt;$file&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt;.&lt;/SPAN&gt;&lt;SPAN style="color: #8B4513;"&gt;Access&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt;&amp;nbsp; &lt;/SPAN&gt;&lt;SPAN style="color: #0000FF;"&gt;|&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt; 
&amp;nbsp; &lt;/SPAN&gt;&lt;SPAN style="color: #0000FF;"&gt;Select&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt; &lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt;@&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt;{&lt;/SPAN&gt;&lt;SPAN style="color: #0000FF;"&gt;N&lt;/SPAN&gt;&lt;SPAN style="color: #FF0000;"&gt;=&lt;/SPAN&gt;&lt;SPAN style="color: #800000;"&gt;"File"&lt;/SPAN&gt;&lt;SPAN style="color: #0000FF;"&gt;;E&lt;/SPAN&gt;&lt;SPAN style="color: #FF0000;"&gt;=&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt;{&lt;/SPAN&gt;&lt;SPAN style="color: #800080;"&gt;$file&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt;.&lt;/SPAN&gt;&lt;SPAN style="color: #0000FF;"&gt;PSChildName&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt;}}&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt;,&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt;&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; &lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt;@&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt;{&lt;/SPAN&gt;&lt;SPAN style="color: #0000FF;"&gt;N&lt;/SPAN&gt;&lt;SPAN style="color: #FF0000;"&gt;=&lt;/SPAN&gt;&lt;SPAN style="color: #800000;"&gt;"Path"&lt;/SPAN&gt;&lt;SPAN style="color: #0000FF;"&gt;;E&lt;/SPAN&gt;&lt;SPAN style="color: #FF0000;"&gt;=&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt;{&lt;/SPAN&gt;&lt;SPAN style="color: #800080;"&gt;$file&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt;.&lt;/SPAN&gt;&lt;SPAN style="color: #8B4513;"&gt;Path&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt;.&lt;/SPAN&gt;&lt;SPAN style="color: #8B4513;"&gt;Split&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt;(&lt;/SPAN&gt;&lt;SPAN style="color: #800000;"&gt;'&lt;/SPAN&gt;&lt;SPAN style="color: #800000;"&gt;:&lt;/SPAN&gt;&lt;SPAN style="color: #800000;"&gt;'&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt;)[&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt;2&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt;]}}&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt;,&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt;&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; &lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt;@&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt;{&lt;/SPAN&gt;&lt;SPAN style="color: #0000FF;"&gt;N&lt;/SPAN&gt;&lt;SPAN style="color: #FF0000;"&gt;=&lt;/SPAN&gt;&lt;SPAN style="color: #800000;"&gt;"Owner"&lt;/SPAN&gt;&lt;SPAN style="color: #0000FF;"&gt;;E&lt;/SPAN&gt;&lt;SPAN style="color: #FF0000;"&gt;=&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt;{&lt;/SPAN&gt;&lt;SPAN style="color: #800080;"&gt;$file&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt;.&lt;/SPAN&gt;&lt;SPAN style="color: #0000FF;"&gt;Owner&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt;}}&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt;,&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt;&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; &lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt;@&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt;{&lt;/SPAN&gt;&lt;SPAN style="color: #0000FF;"&gt;N&lt;/SPAN&gt;&lt;SPAN style="color: #FF0000;"&gt;=&lt;/SPAN&gt;&lt;SPAN style="color: #800000;"&gt;"Name"&lt;/SPAN&gt;&lt;SPAN style="color: #0000FF;"&gt;;E&lt;/SPAN&gt;&lt;SPAN style="color: #FF0000;"&gt;=&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt;{&lt;/SPAN&gt;&lt;SPAN style="color: #000080;"&gt;$_&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt;.&lt;/SPAN&gt;&lt;SPAN style="color: #0000FF;"&gt;IdentityReference&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt;}}&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt;,&lt;BR /&gt;&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; &lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt;@&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt;{&lt;/SPAN&gt;&lt;SPAN style="color: #0000FF;"&gt;N&lt;/SPAN&gt;&lt;SPAN style="color: #FF0000;"&gt;=&lt;/SPAN&gt;&lt;SPAN style="color: #800000;"&gt;"Type"&lt;/SPAN&gt;&lt;SPAN style="color: #0000FF;"&gt;;E&lt;/SPAN&gt;&lt;SPAN style="color: #FF0000;"&gt;=&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt;{&lt;/SPAN&gt;&lt;SPAN style="color: #000080;"&gt;$_&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt;.&lt;/SPAN&gt;&lt;SPAN style="color: #0000FF;"&gt;AccessControlType&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt;}}&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt;,&lt;BR /&gt;&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; &lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt;@&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt;{&lt;/SPAN&gt;&lt;SPAN style="color: #0000FF;"&gt;N&lt;/SPAN&gt;&lt;SPAN style="color: #FF0000;"&gt;=&lt;/SPAN&gt;&lt;SPAN style="color: #800000;"&gt;"Rights"&lt;/SPAN&gt;&lt;SPAN style="color: #0000FF;"&gt;;E&lt;/SPAN&gt;&lt;SPAN style="color: #FF0000;"&gt;=&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt;{&lt;/SPAN&gt;&lt;SPAN style="color: #000080;"&gt;$_&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt;.&lt;/SPAN&gt;&lt;SPAN style="color: #0000FF;"&gt;FileSystemRights&lt;/SPAN&gt;&lt;SPAN style="color: #000000;"&gt;}}
}
&lt;/SPAN&gt;&lt;/PRE&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Mon, 22 Apr 2013 09:28:49 GMT</pubDate>
      <guid>https://communities.vmware.com/t5/VMware-PowerCLI-Discussions/Compliance-check-of-NTFS-permission-on-the-vCenter-server/m-p/2137614#M69313</guid>
      <dc:creator>LucD</dc:creator>
      <dc:date>2013-04-22T09:28:49Z</dc:date>
    </item>
    <item>
      <title>Re: Compliance check of NTFS permission on the vCenter server</title>
      <link>https://communities.vmware.com/t5/VMware-PowerCLI-Discussions/Compliance-check-of-NTFS-permission-on-the-vCenter-server/m-p/2915020#M107089</link>
      <description>&lt;P&gt;Hi LucD,&lt;/P&gt;&lt;P&gt;Sorry to pull you on the old thread. I am just trying something similar which is mentioned in the thread.&lt;/P&gt;&lt;P&gt;I am trying to get list of users mentioned in the share tab of the folder security advanced settings but unable to&amp;nbsp; get exact cmdlet. (see below snippet). Looking for the information which is highlighted in yellow.&amp;nbsp;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Get-Acl -Path "\\share\folder1"&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="vin01_0-1655742134066.png" style="width: 400px;"&gt;&lt;img src="https://communities.vmware.com/t5/image/serverpage/image-id/95869iBDD89C12D6C2D42F/image-size/medium/is-moderation-mode/true?v=v2&amp;amp;px=400" role="button" title="vin01_0-1655742134066.png" alt="vin01_0-1655742134066.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Mon, 20 Jun 2022 16:24:00 GMT</pubDate>
      <guid>https://communities.vmware.com/t5/VMware-PowerCLI-Discussions/Compliance-check-of-NTFS-permission-on-the-vCenter-server/m-p/2915020#M107089</guid>
      <dc:creator>vin01</dc:creator>
      <dc:date>2022-06-20T16:24:00Z</dc:date>
    </item>
    <item>
      <title>Re: Compliance check of NTFS permission on the vCenter server</title>
      <link>https://communities.vmware.com/t5/VMware-PowerCLI-Discussions/Compliance-check-of-NTFS-permission-on-the-vCenter-server/m-p/2915023#M107090</link>
      <description>&lt;P&gt;Have a look at the &lt;A href="https://docs.microsoft.com/en-us/powershell/module/smbshare/get-smbshareaccess?view=windowsserver2022-ps" target="_blank" rel="noopener"&gt;Get-SmbShareAccess&lt;/A&gt;&amp;nbsp; cmdlet.&lt;/P&gt;</description>
      <pubDate>Mon, 20 Jun 2022 16:46:43 GMT</pubDate>
      <guid>https://communities.vmware.com/t5/VMware-PowerCLI-Discussions/Compliance-check-of-NTFS-permission-on-the-vCenter-server/m-p/2915023#M107090</guid>
      <dc:creator>LucD</dc:creator>
      <dc:date>2022-06-20T16:46:43Z</dc:date>
    </item>
  </channel>
</rss>

