---

$sid = [System.Security.Principal.WindowsIdentity]::GetCurrent().User.Value

icacls "C:\Scripts" /grant:r "*$sid:(OI)(CI)(RX)"
icacls "C:\Scripts" /deny "*$sid:(OI)(CI)(W,D,DC)"