问删除用户在所有子目录中的网络驱动器权限

EN

$path = "X:"
$username = "Domain\User"
Get-Item -Path $path -Directory -Recurse | %{
    $acl = Get-Acl -Path $_.FullName
    $aces = $acl.Access | Where-Object { -not $_.IsInherited -and $_.IdentityReference.Value -eq $username }

    if ($aces -ne $null -and $aces.Count -gt 0) {

        Write-Host "Found $($aces.Count) ACE granted for $username on $($_.FullName)"

        foreach($ace in $aces) {
            $acl.RemoveAccessRule($ace)
        }
        $acl | Set-Acl -Path $_.FullName
    }
}