Seeing specific FileSystemAccessRule properties...

I'm just trying to get a list of ACL permissions on a folder... Similar to
when I do:
>get-acl c:\ | format-list

Path : Microsoft.PowerShell.Core\FileSystem::C:\
Owner : BUILTIN\Administrators
Group : NT AUTHORITY\SYSTEM
Access : Everyone Allow ReadAndExecute, Synchronize
CREATOR OWNER Allow 268435456
NT AUTHORITY\SYSTEM Allow FullControl
BUILTIN\Administrators Allow FullControl
BUILTIN\Users Allow AppendData
BUILTIN\Users Allow CreateFiles
BUILTIN\Users Allow ReadAndExecute, Synchronize
Audit :
Sddl : O:BAG:SYDA;;0x1200a9;;;WD)(A;OICIIO;GA;;;CO)(A;OICI;F...

However, I just want the same list, except ONLY see the text from Parth and
Access.

But, when I do,
>get-acl c:\ | select-object path,access | format-list

I get...

Path : Microsoft.PowerShell.Core\FileSystem::C:\
Access : {System.Security.AccessControl.FileSystemAccessRule,
System.Security.AccessControl.FileSystemAccessRule, System.Security.AccessCon
trol.FileSystemAccessRule,
System.Security.AccessControl.FileSystemAccessRule...}

It seems that before I 'filter' out the objects, PS knows exactly what
'default' properties to show, but after the filter, it just gets lazy and
throws the whole object at me.

How do I manuipulate the object to get the following output?

Path : Microsoft.PowerShell.Core\FileSystem::C:\
Access : Everyone Allow ReadAndExecute, Synchronize
CREATOR OWNER Allow 268435456
NT AUTHORITY\SYSTEM Allow FullControl
BUILTIN\Administrators Allow FullControl
BUILTIN\Users Allow AppendData
BUILTIN\Users Allow CreateFiles
BUILTIN\Users Allow ReadAndExecute, Synchronize

Thanks Much!!

I will let Jeffrey and party explain why this happens, but heres a quick
script that does what you want:

Function Display-Acl {
Param([string]$path)
$acls = get-Acl $path | Sort-Object IdentityReference
Write-Host "Path: $($acls.Path)"
Write-Host "Access:"
foreach($acl in $acls.Access){
Write-Host `t $acl.IdentityReference $acl.AccessControlType
$acl.FileSystemRights
}
}
"Matt" <Matt@discussions.microsoft.com> wrote in message
news:A2C06EA8-941B-457F-8F15-19E89171997D@microsoft.com...
> I'm just trying to get a list of ACL permissions on a folder... Similar
> to
> when I do:
>>get-acl c:\ | format-list
>
> Path : Microsoft.PowerShell.Core\FileSystem::C:\
> Owner : BUILTIN\Administrators
> Group : NT AUTHORITY\SYSTEM
> Access : Everyone Allow ReadAndExecute, Synchronize
> CREATOR OWNER Allow 268435456
> NT AUTHORITY\SYSTEM Allow FullControl
> BUILTIN\Administrators Allow FullControl
> BUILTIN\Users Allow AppendData
> BUILTIN\Users Allow CreateFiles
> BUILTIN\Users Allow ReadAndExecute, Synchronize
> Audit :
> Sddl : O:BAG:SYDA;;0x1200a9;;;WD)(A;OICIIO;GA;;;CO)(A;OICI;F...
>
> However, I just want the same list, except ONLY see the text from Parth
> and
> Access.
>
> But, when I do,
>>get-acl c:\ | select-object path,access | format-list
>
> I get...
>
> Path : Microsoft.PowerShell.Core\FileSystem::C:\
> Access : {System.Security.AccessControl.FileSystemAccessRule,
> System.Security.AccessControl.FileSystemAccessRule,
> System.Security.AccessCon
> trol.FileSystemAccessRule,
> System.Security.AccessControl.FileSystemAccessRule...}
>
> It seems that before I 'filter' out the objects, PS knows exactly what
> 'default' properties to show, but after the filter, it just gets lazy and
> throws the whole object at me.
>
> How do I manuipulate the object to get the following output?
>
> Path : Microsoft.PowerShell.Core\FileSystem::C:\
> Access : Everyone Allow ReadAndExecute, Synchronize
> CREATOR OWNER Allow 268435456
> NT AUTHORITY\SYSTEM Allow FullControl
> BUILTIN\Administrators Allow FullControl
> BUILTIN\Users Allow AppendData
> BUILTIN\Users Allow CreateFiles
> BUILTIN\Users Allow ReadAndExecute, Synchronize
>
> Thanks Much!!
>

2 other options, that are close

get-acl c:\ | select Path -Expand Access

get-acl c:\ | select Path -Expand Access | fl
path,IdentityReference,AccessControlType,FileSystemRights

gr /\/\o\/\/

"Brandon Shell" wrote:

> I will let Jeffrey and party explain why this happens, but heres a quick
> script that does what you want:
>
> Function Display-Acl {
> Param([string]$path)
> $acls = get-Acl $path | Sort-Object IdentityReference
> Write-Host "Path: $($acls.Path)"
> Write-Host "Access:"
> foreach($acl in $acls.Access){
> Write-Host `t $acl.IdentityReference $acl.AccessControlType
> $acl.FileSystemRights
> }
> }
> "Matt" <Matt@discussions.microsoft.com> wrote in message
> news:A2C06EA8-941B-457F-8F15-19E89171997D@microsoft.com...
> > I'm just trying to get a list of ACL permissions on a folder... Similar
> > to
> > when I do:
> >>get-acl c:\ | format-list
> >
> > Path : Microsoft.PowerShell.Core\FileSystem::C:\
> > Owner : BUILTIN\Administrators
> > Group : NT AUTHORITY\SYSTEM
> > Access : Everyone Allow ReadAndExecute, Synchronize
> > CREATOR OWNER Allow 268435456
> > NT AUTHORITY\SYSTEM Allow FullControl
> > BUILTIN\Administrators Allow FullControl
> > BUILTIN\Users Allow AppendData
> > BUILTIN\Users Allow CreateFiles
> > BUILTIN\Users Allow ReadAndExecute, Synchronize
> > Audit :
> > Sddl : O:BAG:SYDA;;0x1200a9;;;WD)(A;OICIIO;GA;;;CO)(A;OICI;F...
> >
> > However, I just want the same list, except ONLY see the text from Parth
> > and
> > Access.
> >
> > But, when I do,
> >>get-acl c:\ | select-object path,access | format-list
> >
> > I get...
> >
> > Path : Microsoft.PowerShell.Core\FileSystem::C:\
> > Access : {System.Security.AccessControl.FileSystemAccessRule,
> > System.Security.AccessControl.FileSystemAccessRule,
> > System.Security.AccessCon
> > trol.FileSystemAccessRule,
> > System.Security.AccessControl.FileSystemAccessRule...}
> >
> > It seems that before I 'filter' out the objects, PS knows exactly what
> > 'default' properties to show, but after the filter, it just gets lazy and
> > throws the whole object at me.
> >
> > How do I manuipulate the object to get the following output?
> >
> > Path : Microsoft.PowerShell.Core\FileSystem::C:\
> > Access : Everyone Allow ReadAndExecute, Synchronize
> > CREATOR OWNER Allow 268435456
> > NT AUTHORITY\SYSTEM Allow FullControl
> > BUILTIN\Administrators Allow FullControl
> > BUILTIN\Users Allow AppendData
> > BUILTIN\Users Allow CreateFiles
> > BUILTIN\Users Allow ReadAndExecute, Synchronize
> >
> > Thanks Much!!
> >
>
>

Thanks Brandon and MOW, both of your replies got me past a big hurdle up the
learning curve!

"/\/\o\/\/ [MVP]" wrote:

> 2 other options, that are close
>
> get-acl c:\ | select Path -Expand Access
>
> get-acl c:\ | select Path -Expand Access | fl
> path,IdentityReference,AccessControlType,FileSystemRights
>
> gr /\/\o\/\/
>
> "Brandon Shell" wrote:
>
> > I will let Jeffrey and party explain why this happens, but heres a quick
> > script that does what you want:
> >
> > Function Display-Acl {
> > Param([string]$path)
> > $acls = get-Acl $path | Sort-Object IdentityReference
> > Write-Host "Path: $($acls.Path)"
> > Write-Host "Access:"
> > foreach($acl in $acls.Access){
> > Write-Host `t $acl.IdentityReference $acl.AccessControlType
> > $acl.FileSystemRights
> > }
> > }
> > "Matt" <Matt@discussions.microsoft.com> wrote in message
> > news:A2C06EA8-941B-457F-8F15-19E89171997D@microsoft.com...
> > > I'm just trying to get a list of ACL permissions on a folder... Similar
> > > to
> > > when I do:
> > >>get-acl c:\ | format-list
> > >
> > > Path : Microsoft.PowerShell.Core\FileSystem::C:\
> > > Owner : BUILTIN\Administrators
> > > Group : NT AUTHORITY\SYSTEM
> > > Access : Everyone Allow ReadAndExecute, Synchronize
> > > CREATOR OWNER Allow 268435456
> > > NT AUTHORITY\SYSTEM Allow FullControl
> > > BUILTIN\Administrators Allow FullControl
> > > BUILTIN\Users Allow AppendData
> > > BUILTIN\Users Allow CreateFiles
> > > BUILTIN\Users Allow ReadAndExecute, Synchronize
> > > Audit :
> > > Sddl : O:BAG:SYDA;;0x1200a9;;;WD)(A;OICIIO;GA;;;CO)(A;OICI;F...
> > >
> > > However, I just want the same list, except ONLY see the text from Parth
> > > and
> > > Access.
> > >
> > > But, when I do,
> > >>get-acl c:\ | select-object path,access | format-list
> > >
> > > I get...
> > >
> > > Path : Microsoft.PowerShell.Core\FileSystem::C:\
> > > Access : {System.Security.AccessControl.FileSystemAccessRule,
> > > System.Security.AccessControl.FileSystemAccessRule,
> > > System.Security.AccessCon
> > > trol.FileSystemAccessRule,
> > > System.Security.AccessControl.FileSystemAccessRule...}
> > >
> > > It seems that before I 'filter' out the objects, PS knows exactly what
> > > 'default' properties to show, but after the filter, it just gets lazy and
> > > throws the whole object at me.
> > >
> > > How do I manuipulate the object to get the following output?
> > >
> > > Path : Microsoft.PowerShell.Core\FileSystem::C:\
> > > Access : Everyone Allow ReadAndExecute, Synchronize
> > > CREATOR OWNER Allow 268435456
> > > NT AUTHORITY\SYSTEM Allow FullControl
> > > BUILTIN\Administrators Allow FullControl
> > > BUILTIN\Users Allow AppendData
> > > BUILTIN\Users Allow CreateFiles
> > > BUILTIN\Users Allow ReadAndExecute, Synchronize
> > >
> > > Thanks Much!!
> > >
> >
> >