function Set-WebTierFolderAndFilePermissions { <# .SYNOPSIS This function sets folder and file permissions on the Web Tier for Services, Hosts File, Log Files, etc #> [CmdletBinding()] Param() $logLead = (Get-LogLeadName); $modifyRight = [System.Security.AccessControl.FileSystemRights]::Modify $fullControlRight = [System.Security.AccessControl.FileSystemRights]::FullControl if (!(Test-Path $logsPath)) { Write-Output ("$logLead : Could not find log path {0}. Creating it." -f $logsPath) [System.IO.Directory]::CreateDirectory($logsPath) | Out-Null } Write-Output ("$logLead : Setting Rights Users : Modify" -f $logsPath) Grant-RightsToFolderOrFile -account "BUILTIN\Users" -path $logsPath -rights $modifyRight $hostsFile = "C:\Windows\System32\Drivers\etc\hosts" Write-Output ("$logLead : Setting Rights Users : Modify" -f $hostsFile) Grant-RightsToFolderOrFile -account "BUILTIN\Users" -path $hostsFile -rights $modifyRight $iisUsers = "BUILTIN\IIS_IUSRS" Write-Output ("$logLead : Setting Rights for {1} : Modify" -f $basePath, $iisUsers) Grant-RightsToFolderOrFile -account $iisUsers -path $basePath -rights $modifyRight Write-Output ("$logLead : Setting Rights Administrators : FullControl" -f $logsPath) Grant-RightsToFolderOrFile -account "BUILTIN\Administrators" -path $basePath -rights $fullControlRight }