DESCRIPTION: The SD command sets or displays the security descriptor for a DFS folder (link). The security descriptor is ...

DESCRIPTION:
The SD command sets or displays the security descriptor for a DFS folder 
(link). The security descriptor is used by access-based enumeration to 
determine which groups or users can view a DFS folder (link). You can set 
security descriptors using the Grant, Deny, and Revoke commands. To use the 
Security Descriptor Definition Language (SDDL), use the Set command. Security 
descriptors are merged with inherited permissions from the local file system 
unless you specify the Protect option with the Grant or Deny commands (or P 
with the Set command).

%1!ws!

PARAMETERS:
  : UNC path of the DFS folder.
ShowSddl   : Display the security descriptor using SDDL.

EXAMPLES:
dfsutil property SD \\contoso.com\DomainNamespace1\Link1 
dfsutil property SD \\StandaloneServer
amespace1\Link1 showsddl