PowerShell Logo Small

Block-SmbShareAccess



This is the built-in help made by Microsoft for the command 'Block-SmbShareAccess', in PowerShell version 5 - as retrieved from Windows version 'Microsoft Windows Server 2012 R2 Standard' PowerShell help files on 2016-06-23.

For PowerShell version 3 and up, where you have Update-Help, this command was run just before creating the web pages from the help files.

SYNOPSIS

Adds a deny access control entry (ACE) for a trustee to the security descriptor of the Server Message Block (SMB) share.

SYNTAX


Block-SmbShareAccess [-Name] <String[]> [[-ScopeName] <String[]>] [-AccountName <String[]>] [-AsJob] [-CimSession <CimSession[]>] [-Force] [-ThrottleLimit <Int32>]
[-Confirm] [-WhatIf] [<CommonParameters>]
Block-SmbShareAccess [-AccountName <String[]>] [-AsJob] [-CimSession <CimSession[]>] [-Force] [-ThrottleLimit <Int32>] -InputObject <CimInstance[]> [-Confirm] [-WhatIf]
[<CommonParameters>]



Search powershellhelp.space

DESCRIPTION


The Block-SmbShareAccess cmdlet adds a deny access control entry (ACE) to the security descriptor of the Server Message Block (SMB) share.



<

RELATED LINKS

Online Version: http://go.microsoft.com/fwlink/?LinkId=289493
Get-SmbShareAccess
Grant-SmbShareAccess
Revoke-SmbShareAccess
Unblock-SmbShareAccess

REMARKS

<

Examples


EXAMPLE 1

PS C:\>Block-SmbShareAccess -Name VMFiles -AccountName Contoso\Guest
Confirm
Are you sure you want to perform this action?
Performing operation 'Modify' on Target 'Contoso-SO,VMFiles'.
[Y] Yes [A] Yes to All [N] No [L] No to All [S] Suspend [?] Help (default is "Y"): Y

Name ScopeName AccountName AccessControlType AccessRight
---- --------- ----------- ----------------- -----------
VMFiles Contoso-SO Contoso\Guest Deny Full
VMFiles Contoso-SO Contoso\Administrator Allow Full
VMFiles Contoso-SO Contoso\Contoso-HV1$ Allow Full
VMFiles Contoso-SO Contoso\Contoso-HV2$ Allow Full
VMFiles Contoso-SO Contoso\Domain Admins Allow Change



This example adds a deny ACE for a trustee to the security descriptor of an SMB share named VMFiles.




EXAMPLE 2

PS C:\>Block-SmbShareAccess -Name VMFiles -AccountName "Guest Users" -Force

Name ScopeName AccountName AccessControlType AccessRight
---- --------- ----------- ----------------- -----------
VMFiles Contoso-SO Contoso\Guest Deny Full
VMFiles Contoso-SO Contoso\Administrator Allow Full
VMFiles Contoso-SO Contoso\Contoso-HV1$ Allow Full
VMFiles Contoso-SO Contoso\Contoso-HV2$ Allow Full
VMFiles Contoso-SO Contoso\Domain Admins Allow Change



This example adds a deny ACE for a trustee to the security descriptor of an SMB share named VMFiles without confirmation from the user.