Access control in Windows, while very powerful, can be very complicated. Working with security descriptors one object at a time through the GUI is fairly straightforward, but that doesn’t help when you need to verify and/or configure settings for multiple objects at the same time. There are utilities available to handle this in an automated fashion, but most only work with certain types of objects, and they each have their own syntax. Fortunately, PowerShell has the ability to replace most, if not all, of those utility applications. In this session, we'll cover ways to use PowerShell to view and edit access control lists for almost any object in Windows that is secured with a security descriptor, including files, folders, registry keys, services, processes, WMI namespaces, Active Directory objects, and more. We'll cover using both native PowerShell commands, .NET methods, and the free PowerShell Access Control script module.