Sometimes I'll run a command like this, and I'll get back some easy to read, easy to interpret text:
PS D:\test> (get-acl test.txt).Access | Select FileSystemRights
FileSystemRights
----------------
Modify, Synchronize
...and other times I'll get back a number:
PS D:\test> (get-acl test2.txt).Access | Select FileSystemRights
FileSystemRights
----------------
268435456
What is the number, and what does it mean ?
The FileSystemRights attribute is an enumeration. However the generic rights will not be enumerated. See output of:
[System.Enum]::GetValues([System.Security.AccessControl.FileSystemRights])
The Access Mask Format defines the upper four bits for generic access rights. These rights are GENERIC_ALL (268435456) -- what you've seen, GENERIC_EXECUTE (536870912), GENERIC_WRITE (1073741824) and GENERIC_READ(2147483648)
This is only an educated guess.
It is a mapped drive on a newer and separate branch of Windows. The Server version most likely has additional ACL rights available, and Windows 7 Pro does not have text descriptions of those ACL rights. Therefore it only shows the numerical value of the ACL.
