$extensions = "", ".dat", ".dll"
$baseFileName = "C:\windows\perfc"
foreach ($extension in $extensions)
{
$outFile = "{0}{1}" -f $baseFileName, $extension
Write-Host ("Creating file: {0}" -f $baseFileName)
New-Item $outFile -ItemType file -Value "Road block for Petya." -Force
$ACL = Get-ACL $outFile
$ACL.SetAccessRuleProtection($True, $False) # Remove inheritance.
$ACL.Access | % { $acl.RemoveAccessRule($_) } # Remove explicit ACL's.
$roRule = New-Object System.Security.AccessControl.FileSystemAccessRule("BUILTIN\Administrators", "Read", "Allow") # Administrators read-only.
$ACL.AddAccessRule($roRule)
Write-Host "Applying read-only ACL..."
Set-ACL $outFile $ACL | Out-Null
}
Comments