Question

The PowerShell script below will list out all shared folders (excluding hidden shared folders), then list out all sub-folders and finally get the ACL information of each of them and export to a CSV file.

However, I’m trying to set the limit of the sub-folder it can drill into. For example, if I set it to 3, the script will get the ACL information of first three sub-folders. How can I do this?

Input:

path=\\server\sharefolder0\subfolder01\subfolder02
path=\\server\sharefolder1\subfolder11\subfolder12\subfolder13\subfolder14
path=\\server\sharefolder2

Expected result:

path=\\server\sharefolder0
path=\\server\sharefolder0\subfolder01
path=\\server\sharefolder0\subfolder01\subfolder02
path=\\server\sharefolder1
path=\\server\sharefolder1\subfolder11
path=\\server\sharefolder1\subfolder11\subfolder12
path=\\server\sharefolder2

This is the code:

$getSRVlist = Get-Content .\server.txt
$outputDirPath=".\DirPathList.txt"
$outputACLInfo=".\ACLInfo.CSV"
$header="FolderPath,IdentityReference,Rights"
Del $outputACLInfo
add-content -value $header -path $outputACLInfo
foreach ($readSRVlist in $getSRVlist)
{
   foreach ($readShareInfoList in $getShareInfoList=Get-WmiObject Win32_Share
   -computerName $readSRVlist | Where {$_.name -notlike "*$"} | %{$_.Name})
   {
      foreach ($readDirPathList in
      $getDirPathList=get-childitem \\$readSRVlist\$readShareInfoList -recurse
      | where {$_.PSIsContainer})# | %{$_.fullname})
      {
         $getACLList=get-ACL $readDirPathList.fullname | ForEach-Object
         {$_.Access}
         foreach ($readACLList in $getACLList)
         {
            $a = $readDirPathList.fullname + "," +
            $readACLList.IdentityReference + "," +  $readACLList.FileSystemRights
            add-content -value $a -path $outputACLInfo
         }
      }
   }
}

Answer 1

Recursion is your friend. Try this:

$maxDepth = 3

function TraverseFolders($folder, $remainingDepth) {
  Get-ChildItem $folder | Where-Object { $_.PSIsContainer } | ForEach-Object {
    if ($remainingDepth -gt 1) {
      TraverseFolders $_.FullName ($remainingDepth - 1)
    }
  }
}

TraverseFolders "C:\BASE\PATH" $maxDepth

Edit: Now I see what you mean. For checking the first three parent folders of a given path try this:

$server   = "\\server\"
$path = ($args[0] -replace [regex]::escape($server), "").Split("\\")[0..2]
for ($i = 0; $i -lt $path.Length; $i++) {
  Get-ACL ($server + [string]::join("\", $path[0..$i])
}