DESCRIPTION: Deny command is a quick way to add access-denied ACE to the DACL of Security Descriptor associated with the ...

DESCRIPTION: Deny command is a quick way to add access-denied ACE to the DACL of  Security Descriptor associated with the link. It does not do Inplace edit or replace the ACE if it is present for the user or group on the link.To remove the access denied ACE, use revoke command.  %1!ws!  PARAMETERS:        : UNC path to the Dfs Link.    : This is trustee information in the form of                   <[\\machine_or_domain\]user_or_group> Protect         : Protect the DACL from inheritance. UnProtect       : Remove the protection on the DACL. The inherited ACEs                   will be propagated on the reparse point/s of the link                   from its parent directory.  %2!ws!      EXAMPLES: dfsutil property ACL deny \\contoso.com\DomainNamespace1\Link1 CONTOSO\UserId:RX protect dfsutil property ACL deny \\StandaloneServer
amespace1\Link1 UserId:(GR,S)