设置NTFS文件访问权限

给你一个我自己收集整理的类：

例：

using  System.Security.AccessControl;


string  strPath =  "d:\temp" ;
if  (!Directory.Exists(strPath))
{
    Directory.CreateDirectory(strPath);
}
// 重新设置目录访问权限
NTFSHelper.RemoveDirectoryAccountSecurityAll(strPath);
NTFSHelper.AddDirectorySecurity(strPath,  "SYSTEM" , FileSystemRights.FullControl);
NTFSHelper.AddDirectorySecurity(strPath,  "Administrators" , FileSystemRights.FullControl);

NTFSHelper.cs

using  System;
using  System.IO;
using  System.Text;
using  System.Collections.Generic;
using  System.Security.AccessControl;

namespace  NTFS
{
    public  sealed  class  NTFSHelper
    {
        #region 目录权限

        #region 添加权限
        ///
        /// 添加 指定目录 指定用户 指定的 权限
        ///
        /// 指定目录
        /// 用户帐户
        /// 权限【RCFW】
        public  static  void  AddDirectorySecurity( string  FileName,  string  Account,  string  UserRights)
        {
            FileSystemRights Rights =  new  FileSystemRights();

            if  (UserRights.IndexOf( "R" ) >= 0)
            {
                Rights = Rights | FileSystemRights.Read;
            }
            if  (UserRights.IndexOf( "C" ) >= 0)
            {
                Rights = Rights | FileSystemRights.ChangePermissions;
            }
            if  (UserRights.IndexOf( "F" ) >= 0)
            {
                Rights = Rights | FileSystemRights.FullControl;
            }
            if  (UserRights.IndexOf( "W" ) >= 0)
            {
                Rights = Rights | FileSystemRights.Write;
            }

            bool  ok;
            DirectoryInfo dInfo =  new  DirectoryInfo(FileName);
            DirectorySecurity dSecurity = dInfo.GetAccessControl();
            InheritanceFlags iFlags =  new  InheritanceFlags();
            iFlags = InheritanceFlags.ContainerInherit | InheritanceFlags.ObjectInherit;
            FileSystemAccessRule AccessRule2 =  new  FileSystemAccessRule(Account, Rights, iFlags, PropagationFlags.None, AccessControlType.Allow);
            dSecurity.ModifyAccessRule(AccessControlModification.Add, AccessRule2,  out  ok);
            dInfo.SetAccessControl(dSecurity);
        }
        ///
        /// 添加 指定目录 指定用户 指定的 权限
        ///
        /// 指定目录
        /// 用户帐户
        /// Windows目录权限
        public  static  void  AddDirectorySecurity( string  FileName,  string  Account, FileSystemRights Rights)
        {
            bool  ok;
            DirectoryInfo dInfo =  new  DirectoryInfo(FileName);
            DirectorySecurity dSecurity = dInfo.GetAccessControl();
            InheritanceFlags iFlags =  new  InheritanceFlags();
            iFlags = InheritanceFlags.ContainerInherit | InheritanceFlags.ObjectInherit;
            FileSystemAccessRule AccessRule2 =  new  FileSystemAccessRule(Account, Rights, iFlags, PropagationFlags.None, AccessControlType.Allow);
            dSecurity.ModifyAccessRule(AccessControlModification.Add, AccessRule2,  out  ok);
            dInfo.SetAccessControl(dSecurity);
        }
        #endregion

        #region 获取目录权限
        ///
        /// 获取 指定目录 除Administrators和SYSTEM之外的 权限列表
        ///
        ///
        ///
        public  static  List< string > GetDirectoryAccountSecurity( string  DirName)
        {
            List< string > dAccount =  new  List< string >();
            DirectoryInfo dInfo =  new  DirectoryInfo(DirName);
            if  (dInfo.Exists)
            {
                DirectorySecurity sec = Directory.GetAccessControl(DirName, AccessControlSections.All);
                foreach  (FileSystemAccessRule rule  in  sec.GetAccessRules( true ,  true ,  typeof (System.Security.Principal.NTAccount)))
                {
                    if  (rule.IdentityReference.Value !=  @"NT AUTHORITY\SYSTEM"  && rule.IdentityReference.Value !=  @"BUILTIN\Administrators" )
                        dAccount.Add(rule.IdentityReference.Value);
                }
            }
            return  dAccount;
        }
        ///
        /// 获取 指定目录 所有权限列表
        ///
        ///
        ///
        public  static  List< string > GetDirectoryAccountSecurityAll( string  DirName)
        {
            List< string > dAccount =  new  List< string >();
            DirectoryInfo dInfo =  new  DirectoryInfo(DirName);
            if  (dInfo.Exists)
            {
                DirectorySecurity sec = Directory.GetAccessControl(DirName, AccessControlSections.All);
                foreach  (FileSystemAccessRule rule  in  sec.GetAccessRules( true ,  true ,  typeof (System.Security.Principal.NTAccount)))
                {
                    dAccount.Add(rule.IdentityReference.Value);
                }
            }
            return  dAccount;
        }


        #endregion

        #region 移除目录权限
        ///
        /// 移除 指定目录 指定用户的 权限
        ///
        ///
        ///
        public  static  void  RemoveDirectoryAccountSecurity( string  DirName,  string  Account)
        {
            DirectoryInfo dInfo =  new  DirectoryInfo(DirName);
            if  (dInfo.Exists)
            {
                System.Security.Principal.NTAccount myAccount =  new  System.Security.Principal.NTAccount(System.Environment.MachineName, Account);

                DirectorySecurity dSecurity = dInfo.GetAccessControl();

                FileSystemAccessRule AccessRule =  new  FileSystemAccessRule(Account, FileSystemRights.FullControl, AccessControlType.Allow);
                FileSystemAccessRule AccessRule2 =  new  FileSystemAccessRule(Account, FileSystemRights.FullControl, AccessControlType.Deny);

                InheritanceFlags iFlags = InheritanceFlags.ContainerInherit | InheritanceFlags.ObjectInherit;
                PropagationFlags pFlags = PropagationFlags.InheritOnly | PropagationFlags.NoPropagateInherit;

                dSecurity.AccessRuleFactory(myAccount, 983551,  false , iFlags, pFlags, AccessControlType.Allow);

                dSecurity.RemoveAccessRuleAll(AccessRule);
                dSecurity.RemoveAccessRuleAll(AccessRule2);



                dInfo.SetAccessControl(dSecurity);
            }
        }

        ///
        /// 移除 指定目录 所有权限
        ///
        ///
        public  static  void  RemoveDirectoryAccountSecurityAll( string  DirName)
        {
            RemoveDirectoryAccountSecurityProtection(DirName);
            List< string > dAccount = GetDirectoryAccountSecurityAll(DirName);
            foreach  ( string  account  in  dAccount)
            {
                RemoveDirectoryAccountSecurity(DirName, account);
            }
        }

        ///
        /// 移除 指定目录 所有继承的权限
        ///
        ///
        public  static  void  RemoveDirectoryAccountSecurityProtection( string  DirName)
        {
            DirectoryInfo dInfo =  new  DirectoryInfo(DirName);
            if  (dInfo.Exists)
            {
                DirectorySecurity dSecurity = dInfo.GetAccessControl();
                dSecurity.SetAccessRuleProtection( true ,  false );
                dSecurity.SetAuditRuleProtection( true ,  false );

                dInfo.SetAccessControl(dSecurity);
            }
        }

        #endregion

        #endregion

        #region 文件权限
        ///
        /// 获取 指定文件 除Administrators和SYSTEM之外的 权限列表
        ///
        ///
        ///
        public  static  List< string > GetFileAccountSecurity( string  fileName)
        {
            List< string > fAccount =  new  List< string >();
            FileInfo fInfo =  new  FileInfo(fileName);
            if  (fInfo.Exists)
            {
                FileSecurity fec = File.GetAccessControl(fileName, AccessControlSections.All);
                foreach  (FileSystemAccessRule rule  in  fec.GetAccessRules( true ,  true ,  typeof (System.Security.Principal.NTAccount)))
                {
                    if  (rule.IdentityReference.Value !=  @"NT AUTHORITY\SYSTEM"  && rule.IdentityReference.Value !=  @"BUILTIN\Administrators" )
                        fAccount.Add(rule.IdentityReference.Value);
                }
            }
            return  fAccount;
        }

        ///
        /// 移除 指定文件 指定用户的 权限
        ///
        ///
        ///
        public  static  void  RemoveFileAccountSecurity( string  fileName,  string  Account)
        {

            FileInfo fInfo =  new  FileInfo(fileName);
            if  (fInfo.Exists)
            {
                FileSecurity fSecurity = fInfo.GetAccessControl();
                FileSystemAccessRule AccessRule =  new  FileSystemAccessRule(Account, FileSystemRights.FullControl, AccessControlType.Allow);
                FileSystemAccessRule AccessRule2 =  new  FileSystemAccessRule(Account, FileSystemRights.FullControl, AccessControlType.Deny);
                fSecurity.RemoveAccessRuleAll(AccessRule);
                fSecurity.RemoveAccessRuleAll(AccessRule2);
                fInfo.SetAccessControl(fSecurity);
            }
        }

        #endregion
    }
}

转载于:https://www.cnblogs.com/cyes/archive/2013/05/23/3095611.html