[Kazun]

Код:

Get-ChildItem C:\Shares -Recurse| Where {$_.PsIsContainer} | Foreach {
	$acl = $_.GetAccessControl()
	$owner = $acl.Owner.Split("\")[1]
	$rw_gr = "RW_$($_.Name)_GL"
	$r_gr = "R_$($_.Name)_GL"
	
	# Создание групп и добавление owner
	New-ADGroup -Name $rw_gr -GroupCategory Security -GroupScope Global -PassThru | Add-ADGroupMember -Members $owner
	New-ADGroup -Name $r_gr -GroupCategory Security -GroupScope Global -PassThru 
	
	
	# Добавление в ACL групп
	icacls $_.FullName /grant "$rw_gr`:(OI)(CI)RW" /grant "$r_gr`:(OI)(CI)R" /T /C
	
	# Смена владельца
	icacls $_.FullName /setowner "Domain Admins" /T /C
}