get-pwfolderSecurity returns extreme number of entries

Question, did you use Get-PWFolders -FolderPath $path -JustOne ? Its possible it returned subfolder security if you didnt use the -JustOne parameter

Good thought...this is what I used:

$SecTable = get-pwfolders -FolderID $Lp -JustOne -Slow | Get-PWFolderSecurity 

Have you used this CMDlet on your system?

How long does it usually take for you?

and how many records does it return?

We have an enormous ACL list... and we have had speed issues - which we attributed to a bloated table...but when this returned 3100 records...It seemed odd to me...but I don't have anything to compare it to

Thanks Brandon!

Bob 

You know what, now that I think about it, I tried this cmdlet in the past and it was not doing what I wanted. I ended up using something like this.

Export-PWProjectAccessControl -FolderPath $Path | Format-Table

This spit out what I wanted and I was able to manipulate it better.

Good Idea.

I tried this:

Export-PWProjectAccessControl -Folderid $lp | Format-Table...

It is slow, but it gives me much better output:

ProjectName SecurityType Type Name Access_Control_Settings Workflow State InheritingFrom FullPath          ParentProjectName
-----------         ------------ ---- ---- ----------------------- -------- ----- --------------  --------                                                              -----------------
SecTest         Project                                                                                 Lansing Support\biggarr SecTest                      SecTest
SecTest         Document                                                                            Lansing Support\biggarr SecTest                       SecTest
test123          Project                                                                                 Lansing Support\biggarr SecTest\test123          SecTest
test123          Document                                                                            Lansing Support\biggarr SecTest\test123          SecTest

missing some columns... but certainly more of what I expected....

Thanks Brandon, this is a big help!

Bob

Question:

The Verbose information returns Type and Member name...but the table information returned doesn't have that.

There is no "-slow"...any Idea hot to get all the table info populated?

Thanks

---------------------------------------------------------------------------------------------------------------------------------------

VERBOSE: 'SecTest' is inheriting access control
VERBOSE: - InheritingFrom: 'Lansing Support\biggarr'
VERBOSE: - Type: 'Document'
VERBOSE: - MemberName: 'engineering support services'
VERBOSE: - AccessMask: '--CDrwSRW--'
VERBOSE: 'SecTest' is inheriting access control
VERBOSE: - InheritingFrom: 'Lansing Support\biggarr'
VERBOSE: - Type: 'Document'
VERBOSE: - MemberName: 'All_Users (*Everyone)'
VERBOSE: - AccessMask: 'NA'

ProjectName : SecTest
SecurityType : Project
Type :
Name :
Access_Control_Settings :
Workflow :
State :
InheritingFrom : Lansing Support\biggarr
FullPath : SecTest
ParentProjectName : SecTest

ProjectName : SecTest
SecurityType : Document
Type :
Name :
Access_Control_Settings :
Workflow :
State :
InheritingFrom : Lansing Support\biggarr
FullPath : SecTest
ParentProjectName : SecTest

try using this parameter -FolderLevel 1

The Type, Name, and Access_Control_Settings will only be returned for folders which have explicit access control set and is not inheriting.  Hope this helps.

The Type, Name, and Access_Control_Settings will only be returned for folders which have explicit access control set and is not inheriting.  Hope this helps.

Brian:

I am trying to get a script to Break Inheritance. The direction I was headed is to change one of the users'  access mask...but I can't "see" what is on the folder...because only explicit ACL is being returned. Have you ever looked into this? Is there a better way...or a way to get the "inherited ACLs"?  

Thanks

Bob