Bir dizinde (folder) everyone için auditing’i aktif eden örnek PowerShell scripti $computer = gc env:computername
$path = "C:\New Folder"
$user = "everyone"
$path = $path.replace("\", "\\")
$SD = ( "Win32_SecurityDescriptor").CreateInstance()
$ace = ( "Win32_ace").CreateInstance()
$Trustee = ( "Win32_Trustee").CreateInstance()
$SID = (new-object security.principal.ntaccount $user).translate()
] $SIDArray = ,0 * $SID.BinaryLength
$SID.GetBinaryForm($SIDArray,0)
$Trustee.Name = $user
$Trustee.SID = $SIDArray
$ace.AccessMask = "Modify"
$ace.AceFlags = "0x67"
$ace.AceType = 2
$ace.Trustee = $trustee
$SD.SACL = $ace
$SD.ControlFlags="0x10"
$wPrivilege = gwmi Win32_LogicalFileSecuritySetting -computername $computer -filter "path='$path'"
$wPrivilege.psbase.Scope.Options.EnablePrivileges = $true
$wPrivilege.setsecuritydescriptor($SD)

https://www.hakanuzuner.com/bir-dizinde-folder-everyone-icin-auditingi-aktif-eden-ornek-powershell-scripti/