Is there a way to filter Get-ACL to see only explicit permissions and ignore files that do not have explicit permissions applied to them?
The basic goal I have is to view all ACLs applied to a file except for ACEs for BUILTIN/ADMINISTRATORS as this is a permissions inherited from the top-level folders.
This is the code I'm currently using:
get-childitem \\server\share -recruse | get-acl | where {$_.accesstostring -notlike "*admin*"}
However, this does indeed block the administrators from displaying, but since administrators is in every ACL, it also blocks everything else from applying.
Any ideas?