DESCRIPTION: Deny command is a quick way to add access-denied ACE to the DACL of Security Descriptor associated with the ...

DESCRIPTION:
Deny command is a quick way to add access-denied ACE to the DACL of 
Security Descriptor associated with the link. It does not do Inplace
edit or replace the ACE if it is present for the user or group on the
link.To remove the access denied ACE, use revoke command.

%1!ws!

PARAMETERS:
       : UNC path to the link.
   : This is trustee information in the form of
                  <[\\machine_or_domain\]user_or_group>
Protect         : Protect the DACL from inheritance.
UnProtect       : Remove the protection on the DACL. The inherited ACEs
                  will be propagated on the reparse point/s of the link
                  from its parent directory.

%2!ws!
    
EXAMPLES:
dfsutil property SD deny \\contoso.com\docs\Link1 CONTOSO\UserId:RX protect
dfsutil property SD deny \\StandaloneServer
amespace1\Link1 UserId:(GR,S)