function Set-AppTierFolderAndFilePermissions {
<#
.SYNOPSIS
	This function sets folder and file permissions on the App Tier for App Tier Services, Hosts File, Log Files, etc
#>

    [CmdletBinding()]
    Param()
    $logLead  = (Get-LogLeadName);

    $modifyRight = [System.Security.AccessControl.FileSystemRights]::Modify
    $fullControlRight = [System.Security.AccessControl.FileSystemRights]::FullControl

    if (!(Test-Path $logsPath)) {
        Write-Output ("$logLead : Could not find log path {0}.  Creating it." -f $logsPath)
        [System.IO.Directory]::CreateDirectory($logsPath) | Out-Null
    }

    Write-Output ("$logLead : Setting Rights Users : Modify" -f $logsPath)
    Grant-RightsToFolderOrFile -account "BUILTIN\Users" -path $logsPath -rights $modifyRight

    $hostsFile = "C:\Windows\System32\Drivers\etc\hosts"
    Write-Output ("$logLead : Setting Rights Users : Modify" -f $hostsFile)
    Grant-RightsToFolderOrFile -account "BUILTIN\Users" -path $hostsFile -rights $modifyRight

    $usersToGrantRightsFor = @()
    $usersToGrantRightsFor += "BUILTIN\IIS_IUSRS"
    (Get-AppTierServices) | Where-Object {$_.User -ne "REPLACEME"} | ForEach-Object {$_.User} | Sort-Object | Get-Unique -AsString | ForEach-Object { $usersToGrantRightsFor += $_ }

    $usersToGrantRightsFor | Sort-Object | Get-Unique | Where-Object {(!([String]::IsNullOrEmpty($_)))} | ForEach-Object {

        Write-Output ("$logLead : Setting Rights for {1} : Modify" -f $basePath, $_.ToString())
        Grant-RightsToFolderOrFile -account $_ -path $basePath -rights $modifyRight
    }

    Write-Output ("$logLead : Setting Rights Administrators : FullControl" -f $logsPath)
    Grant-RightsToFolderOrFile -account "BUILTIN\Administrators" -path $basePath -rights $fullControlRight
}