Set-MsmqQueueACL - 允许 - 不能按照文档使用列表？

Question

我想使用Powershell v5.1（Win2k16）在Msmq队列上设置ACL - 但即使我按照文档 - 我不断收到错误。

Get-MsmqQueue -Name "s009_ClientsServiceBus" -QueueType Private | Set-MsmqQueueAcl -UserName "domain.com\WfxServiceBus" -Allow Peek,Write 

错误：

Set-MsmqQueueACL : Cannot convert 'System.Object[]' to the type 
'System.Nullable`1[Microsoft.Msmq.PowerShell.Commands.MessageQueueAccessRights]' required by parameter 'Allow'. Specified method is 
not supported. 
At line:1 char:128 
+ ... t-MsmqQueueAcl -UserName "domain.com\WfxServiceBus" -Allow Peek,Write 
+                ~~~~~~~~~~ 
    + CategoryInfo   : InvalidArgument: (:) [Set-MsmqQueueACL], ParameterBindingException 
    + FullyQualifiedErrorId : CannotConvertArgument,Microsoft.Msmq.PowerShell.Commands.SetMSMQQueueACLCommand 

的Docs显示下面的例子：

Get-MsmqQueue –Name Order* –QueueType Private | Set-MsmqQueueAcl –UserName “REDMOND\madmax” –Allow Delete,Peek,Receive,Send –Deny TakeOwnership 

运行的是（授予某些参数不正确，我的环境，但同样的错误）.. 。

PS C:\Users\user> Get-MsmqQueue -Name Order* -QueueType Private | Set-MsmqQueueAcl -UserName "REDMOND\madmax" -Allow Delete,Peek,Receive,Send -Deny TakeOwnership 
Set-MsmqQueueACL : Cannot convert 'System.Object[]' to the type 
'System.Nullable`1[Microsoft.Msmq.PowerShell.Commands.MessageQueueAccessRights]' required by parameter 'Allow'. Specified method is 
not supported. 
At line:1 char:100 
+ ... cl -UserName "REDMOND\madmax" -Allow Delete,Peek,Receive,Send -Deny T ... 
+           ~~~~~~~~~~~~~~~~~~~~~~~~ 
    + CategoryInfo   : InvalidArgument: (:) [Set-MsmqQueueACL], ParameterBindingException 
    + FullyQualifiedErrorId : CannotConvertArgument,Microsoft.Msmq.PowerShell.Commands.SetMSMQQueueACLCommand 

所以看起来文档已经过期，或者有什么改变..问题是 - 我该如何做我需要做的事情与Powershell？我试过很多的组合，如：

.... -Allow "Peek,Send" 
.... -Allow "Peek","Send" 
.... -Allow 'Peek,Send' 

等。

如果我只包括一个选项，即：“发送”或“偷看”，那么它工作正常，但我不能发送根据文件的一系列权利。

谢谢！

更新 - 使用 - 允许 “窥视，发送”：

PS C:\Users\meaton> Get-MsmqQueue -Name "s009_ClientsServiceBus" -QueueType Private | Set-MsmqQueueAcl -UserName "domain.com\WfxServic 
eBus" -Allow "Peek,Write" 
Set-MsmqQueueACL : Cannot bind parameter 'Allow'. Cannot convert value "Peek,Write" to type 
"Microsoft.Msmq.PowerShell.Commands.MessageQueueAccessRights". Error: "Unable to match the identifier name Peek,Write to a valid 
enumerator name. Specify one of the following enumerator names and try again: 
DeleteMessage, PeekMessage, ReceiveMessage, WriteMessage, DeleteJournalMessage, ReceiveJournalMessage, SetQueueProperties, 
GetQueueProperties, DeleteQueue, GetQueuePermissions, GenericWrite, GenericRead, ChangeQueuePermissions, TakeQueueOwnership, 
FullControl" 
At line:1 char:128 
+ ... MsmqQueueAcl -UserName "domain.com\WfxServiceBus" -Allow "Peek,Write" 
+                ~~~~~~~~~~~~ 
    + CategoryInfo   : InvalidArgument: (:) [Set-MsmqQueueACL], ParameterBindingException 
    + FullyQualifiedErrorId : CannotConvertArgumentNoMessage,Microsoft.Msmq.PowerShell.Commands.SetMSMQQueueACLCommand 

更改为 “的PeekMessage，SendMessage函数” 按照错误产生完全相同的错误：

...Set-MsmqQueueACL : Cannot bind parameter 'Allow'. Cannot convert value "PeekMessage,WriteMessage" to type 
"Microsoft.Msmq.PowerShell.Commands.MessageQueueAccessRights" due to enumeration values that are not valid. Specify one of.... 

Answer 1

该文档可能缺少引号;该公司预计，an enum that supports bitfields，所以很有可能你会做这样的（我没有在我的2016 PS 5.1箱MSMQ的cmdlet或类型，所以我无法测试），使用逐or：

$allows = [Microsoft.Msmq.PowerShell.Commands.MessageQueueAccessRights]::Peek -bor 
      [Microsoft.Msmq.PowerShell.Commands.MessageQueueAccessRights]::Send -bor 
      [Microsoft.Msmq.PowerShell.Commands.MessageQueueAccessRights]::Receive 

Set-MsmqQueueAcl -UserName "REDMOND\madmax" -Allow $allows 

它应该通过将所有值放在引号中（即不是数组，一个带逗号的字符串）来工作，但是您说您尝试过这种方式并且它不起作用;这是否会产生不同的错误？