Break On
; Connect to WMI and get the file security object for the testfolder directory
$wmiFileSecSetting = GetObject ("winmgmts:Win32_LogicalFileSecuritySetting.path='c:\\temp'")

; Use the Win32_LogicalFileSecuritySetting Caption property to create a simple header before
; dumping the discretionary access control list (DACL).

? "Caption:          " $wmiFileSecSetting.Caption
? "ControlFlags:     " $wmiFileSecSetting.ControlFlags
? "Description:      " $wmiFileSecSetting.Description
? "OwnerPermissions: " $wmiFileSecSetting.OwnerPermissions
? "Path:             " $wmiFileSecSetting.Path
? "SettingID:        " $wmiFileSecSetting.SettingID
?
?

; Obtain existing security descriptor for folder
$wmiFileSecSetting.GetSecurityDescriptor(wmiSecurityDescriptor)
If @error <> 0
    ? "GetSecurityDescriptor failed" + @crlf + @Error + @crlf + @SError
    Exit
Else
    ? "GetSecurityDescriptor suceeded"
    ?
EndIf

$wmiOwner = wmiSecurityDescriptor.Owner

? "Win32_SecurityDescriptor"
? "------------------------"
? "Owner Name:      "  $wmiOwner.Name
? "Owner SIDString: "  $wmiOwner.SIDString
? "Owner Domain:    "  $wmiOwner.Domain