Gecko [ www.vortexaion.com ]

Name	Size	Permission	Date
en-US	[ DIR ]	drwxrwxrwx	2023-03-23 12:54
pt-BR	[ DIR ]	drwxrwxrwx	2019-12-07 15:53
CL_Utility.ps1	20.11 KB	-rw-rw-rw-	2019-12-07 10:09
DiagPackage.diagpkg	15.54 KB	-rw-rw-rw-	2019-12-07 10:09
DiagPackage.dll	79.5 KB	-rw-rw-rw-	2019-12-07 10:09
RS_ResetWindowsSearchApp.ps1	3.84 KB	-rw-rw-rw-	2019-12-07 10:09
RS_RestoreDefaults.ps1	838 B	-rw-rw-rw-	2019-12-07 10:09
RS_RestorePermissions.ps1	2.43 KB	-rw-rw-rw-	2019-12-07 10:09
RS_StartIndexingService.ps1	548 B	-rw-rw-rw-	2019-12-07 10:09
TS_CheckPermissions.ps1	2.61 KB	-rw-rw-rw-	2019-12-07 10:09
TS_FilterHostCrashing.ps1	913 B	-rw-rw-rw-	2019-12-07 10:09
TS_ForcedShutdownInRecovery.ps1	945 B	-rw-rw-rw-	2019-12-07 10:09
TS_ForcedShutdownNoCorruption.ps1	962 B	-rw-rw-rw-	2019-12-07 10:09
TS_IndexingService.ps1	1.97 KB	-rw-rw-rw-	2019-12-07 10:09
TS_IndexingServiceCrashing.ps1	909 B	-rw-rw-rw-	2019-12-07 10:09
TS_ProtocolHostCrashing.ps1	931 B	-rw-rw-rw-	2019-12-07 10:09
TS_SearchApp.ps1	926 B	-rw-rw-rw-	2019-12-07 10:09

Rename

# Restore correct permissions on the indexer data directories.
#
# Correct permissions on the parent of the data directory look like this:
#
# FileSystemRights  : FullControl
# AccessControlType : Allow
# IdentityReference : NT AUTHORITY\SYSTEM
# IsInherited       : True
# InheritanceFlags  : ContainerInherit, ObjectInherit
# PropagationFlags  : None
#
# FileSystemRights  : FullControl
# AccessControlType : Allow
# IdentityReference : BUILTIN\Administrators
# IsInherited       : True
# InheritanceFlags  : ContainerInherit, ObjectInherit
# PropagationFlags  : None
#
# FileSystemRights  : ReadAndExecute, Synchronize
# AccessControlType : Allow
# IdentityReference : BUILTIN\Users
# IsInherited       : True
# InheritanceFlags  : ContainerInherit, ObjectInherit
# PropagationFlags  : None
#
# FileSystemRights  : ReadAndExecute, Synchronize
# AccessControlType : Allow
# IdentityReference : Everyone
# IsInherited       : True
# InheritanceFlags  : ContainerInherit, ObjectInherit
# PropagationFlags  : None

# Load utility library
. .\CL_Utility.ps1

# To change ACEs, SDDL must have BUILTIN\Administrators as owner instead of SYSTEM.
# Otherwise, we get an error because Set-Acl tries to change the owner before the ACEs, and we are not SYSTEM.
$sddl = "O:BAG:SYD:PAI(A;OICI;FA;;;SY)(A;OICI;FA;;;BA)"

Write-DiagProgress -activity $localizationString.progress_rs_restorePermissions

$dataDirectory = (Get-ItemProperty -path "HKLM:\SOFTWARE\Microsoft\Windows Search").DataDirectory

# Append a trailing slash to the dataDirectory if there isn't one
if (!$dataDirectory.EndsWith("\"))
{
    $dataDirectory += "\"
}
$applications = $dataDirectory + "Applications"
$windows = $applications + "\Windows"

function Restore-Permissions([string]$folderPath)
{
    # First change the ACEs with BUILTIN\Administrators as owner
    $acl = get-acl $folderPath
    $acl.SetSecurityDescriptorSddlForm($sddl)
    set-acl -path $folderPath -aclObject $acl
    # Now change the owner to SYSTEM ("S-1-5-18") (This requires asserting SeRestorePrivilege.)
    Set-RestorePrivilege
    $acl = get-acl $folderPath
    $account = New-Object System.Security.Principal.SecurityIdentifier("S-1-5-18")
    $acl.SetOwner($account)
    set-acl -path $folderPath -aclObject $acl
}

Restore-Permissions $dataDirectory
Restore-Permissions $applications
Restore-Permissions $windows