4

Sometimes I'll run a command like this, and I'll get back some easy to read, easy to interpret text:

    PS D:\test> (get-acl test.txt).Access | Select FileSystemRights

   FileSystemRights
   ----------------
   Modify, Synchronize

...and other times I'll get back a number:

    PS D:\test> (get-acl test2.txt).Access | Select FileSystemRights

   FileSystemRights
   ----------------
          268435456

What is the number, and what does it mean ?

leeand00
  • 4,807
  • 13
  • 64
  • 106

2 Answers2

5

The FileSystemRights attribute is an enumeration. However the generic rights will not be enumerated. See output of:

[System.Enum]::GetValues([System.Security.AccessControl.FileSystemRights])

The Access Mask Format defines the upper four bits for generic access rights. These rights are GENERIC_ALL (268435456) -- what you've seen, GENERIC_EXECUTE (536870912), GENERIC_WRITE (1073741824) and GENERIC_READ(2147483648)

jscott
  • 24,204
  • 8
  • 77
  • 99
0

This is only an educated guess.

It is a mapped drive on a newer and separate branch of Windows. The Server version most likely has additional ACL rights available, and Windows 7 Pro does not have text descriptions of those ACL rights. Therefore it only shows the numerical value of the ACL.

Tero Kilkanen
  • 34,499
  • 3
  • 38
  • 58
  • 1
    Have you a link to a list of these "additional ACL rights"? – jscott Aug 08 '16 at 19:40
  • No. As I stated above, this was an educated guess based on my experience with similar systems, and I don't have exact facts on it. I did a short Google search on the subject, but didn't find them. A more thorough search should give you the answer. – Tero Kilkanen Aug 08 '16 at 20:04