Home / server / Questions / 795611
Accepted
leeand00
Asked: 2016-08-09 11:14:50 +0800 CST

Why do I sometimes get numbers back from the FileSystemRights access field when checking the ACL Access?

  • 772

Sometimes I'll run a command like this, and I'll get back some easy to read, easy to interpret text:

    PS D:\test> (get-acl test.txt).Access | Select FileSystemRights

   FileSystemRights
   ----------------
   Modify, Synchronize

...and other times I'll get back a number:

    PS D:\test> (get-acl test2.txt).Access | Select FileSystemRights

   FileSystemRights
   ----------------
          268435456

What is the number, and what does it mean ?

windows ntfs file-permissions binary

2 Answers

  1. Best Answer

    The FileSystemRights attribute is an enumeration. However the generic rights will not be enumerated. See output of:

    [System.Enum]::GetValues([System.Security.AccessControl.FileSystemRights])

    The Access Mask Format defines the upper four bits for generic access rights. These rights are GENERIC_ALL (268435456) -- what you've seen, GENERIC_EXECUTE (536870912), GENERIC_WRITE (1073741824) and GENERIC_READ(2147483648)

    • 5

  2. This is only an educated guess.

    It is a mapped drive on a newer and separate branch of Windows. The Server version most likely has additional ACL rights available, and Windows 7 Pro does not have text descriptions of those ACL rights. Therefore it only shows the numerical value of the ACL.

    • 0