0
1
I need to manage NTFS Access Conditions based on group membership through the Powershell. Digging through MS Documentation about DAC I've found a bunch of cmdlets [Get/New/Set/Remove]-[ADClaimType/ADCentralAccessPolicy/ADCentralAccessRule], but the condition I've created using the GUI (Settings screenshot) is not popping up there. Even though it functions correctly restricting access to members of the specified group only.
I have a feeling that I am missing some point here... It has nothing to do with the claims (since group membership is not an AD User record attribute), so I expected the condition I created to be shown in the rule/policy list, but both seem to be empty.
The end target is the way of managing these type of conditions via PS for the sake of automation. Would be very helpful if somebody points me in the right direction.
Alexey Panov - Dresden