I would like to modify permissions on a number of NetApp CIFS shares (over 100). These are user shares (share names do not match the user names) and each share has a different user account with "Change" share permission, this permission now needs to be "Full Control".
I also need to be able to add a new group to these shares and give that group "Full Control" and finally I need to remove a group "Domain Admins" that has already been given permissions to the shares.
So far I've only worked out how to view the share permissions:
Get-NaCifsShareAcl -Share usertest01 | select ShareName -ExpandProperty UserAclInfo
What I have at the moment is this...
share name: abc1
permission 1: mydomain\user 1 change
permission 2: mydomain\domain admin full control
share name: abc2
permission 1: mydomain\user 2 change
permission 2: mydomain\domain admins full control
What I want to end up with is this....
share name: abc1
permission 1: mydomain\user 1 full control
permission 2: mydomain\new group full control
share name: abc2
permission 1: mydomain\user 2 full control
permission 2: mydomain\new group full control
I think the easiest way to get what I want would be to enumerate the share permissions and for any user account that is not Domain Admins, change its share permission to "full control" then remove Domain Admins and add my new group giving it "full control" as well.