$Root_Folder = "\\net\sz\target"
$AccessRule = new-object System.Security.AccessControl.FileSystemAccessRule('DOMEN\Your_controll_group',"FullControl","ContainerInherit, ObjectInherit", "None", "Allow")
$ACL = Get-Acl $Root_Folder
$ACL.RemoveAccessRule($AccessRule)
$ACL | Set-Acl $Root_Folder -WhatIf
foreach ($folder in Get-ChildItem -Path $Root_Folder -Recurse -Directory)
{
if ( ($ACL = Get-Acl $folder.FullName).AreAccessRulesProtected ) #- выбираем папки со снятым наследованием
{
$folder.FullName
$ACL.AddAccessRule($AccessRule)
$ACL | Set-Acl $folder.FullName -WhatIf
}
}
-WhatIf ремим если всё как нужно.