DESCRIPTION: Grant Command is a quick way to add an access allowed ACE to the DACL in the Security Descriptor associated ...

DESCRIPTION:
Grant Command is a quick way to add an access allowed ACE to the DACL in the
Security Descriptor associated with the link. If an ACE exists in DACL for
the specified user or group, it does in place edit of ACE.

%1!ws!

PARAMETERS:
       : UNC path to the link.
   : This is trustee information in the form of
                  <[\\machine_or_domain\]user_or_group>
Protect         : Protect the DACL from inheritance.
UnProtect       : Remove the protection on the DACL. The inherited ACEs
                  will be propagated on the reparse point/s of the link
                  from its parent directory.
Replace         : Replace the ACE if present. If this option is not
                  specified, it does in place edit of ACE, if present.   
%2!ws!
    
EXAMPLES:
dfsutil property SD grant \\contoso.com\docs\Link1 CONTOSO\UserId:RX protect
dfsutil property SD grant \\SRV1	ools\Link1 UserId:(GR,S) replace