Hi,
I started to use FSRM to protect shared folders from ransomware.
I came up with this command that will block SMB access to the infected user:
-ExecutionPolicy Unrestricted -NoLogo -Command "& { Get-SmbShare -Special $false | ForEach-Object { Block-SmbShareAccess -Name $_.Name -AccountName '[Source Io Owner]' -Force } }"
It works fine, The problem is that I have no clue how to unblock the user..
:D
