Hey everyone. My school is currently running a hyper-v server (server 2008 datacenter) for a wsus/SCCM class. The hyper-v client and server do not have native access control past the administrator/guest level, so we can see each other's machines in the hyper-v client, and potentially delete them.

While honesty SHOULD be the best policy in this line of work, there have already been a number of accidents. Thus, I'm trying to find a way to set up an ACL that is linked to the DC.

Does anyone have an idea as to how I could go about this? It was suggested that I use powershell. Any ideas would be helpful.

Thanks.