---

icacls "C:\Scripts" /grant:r "*S-1-5-18:(OI)(CI)F"
icacls "C:\Scripts" /grant:r "*S-1-5-32-544:(OI)(CI)F"

$sid = [System.Security.Principal.WindowsIdentity]::GetCurrent().User.Value
icacls "C:\Scripts" /deny "*$($sid):(OI)(CI)(D,DC)"