34 lines
1.4 KiB
PowerShell
34 lines
1.4 KiB
PowerShell
|
function Set-WebTierFolderAndFilePermissions {
|
|||
|
|
<#
|
|||
|
|
.SYNOPSIS
|
|||
|
|
This function sets folder and file permissions on the Web Tier for Services, Hosts File, Log Files, etc
|
|||
|
|
#>
|
|||
|
|
|
|||
|
|
[CmdletBinding()]
|
|||
|
|
Param()
|
|||
|
|
$logLead = (Get-LogLeadName);
|
|||
|
|
|
|||
|
|
$modifyRight = [System.Security.AccessControl.FileSystemRights]::Modify
|
|||
|
|
$fullControlRight = [System.Security.AccessControl.FileSystemRights]::FullControl
|
|||
|
|
|
|||
|
|
if (!(Test-Path $logsPath)) {
|
|||
|
|
Write-Output ("$logLead : Could not find log path {0}. Creating it." -f $logsPath)
|
|||
|
|
[System.IO.Directory]::CreateDirectory($logsPath) | Out-Null
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
Write-Output ("$logLead : Setting Rights Users : Modify" -f $logsPath)
|
|||
|
|
Grant-RightsToFolderOrFile -account "BUILTIN\Users" -path $logsPath -rights $modifyRight
|
|||
|
|
|
|||
|
|
$hostsFile = "C:\Windows\System32\Drivers\etc\hosts"
|
|||
|
|
Write-Output ("$logLead : Setting Rights Users : Modify" -f $hostsFile)
|
|||
|
|
Grant-RightsToFolderOrFile -account "BUILTIN\Users" -path $hostsFile -rights $modifyRight
|
|||
|
|
|
|||
|
|
$iisUsers = "BUILTIN\IIS_IUSRS"
|
|||
|
|
Write-Output ("$logLead : Setting Rights for {1} : Modify" -f $basePath, $iisUsers)
|
|||
|
|
Grant-RightsToFolderOrFile -account $iisUsers -path $basePath -rights $modifyRight
|
|||
|
|
|
|||
|
|
Write-Output ("$logLead : Setting Rights Administrators : FullControl" -f $logsPath)
|
|||
|
|
Grant-RightsToFolderOrFile -account "BUILTIN\Administrators" -path $basePath -rights $fullControlRight
|
|||
|
|
}
|
|||
|
|
|