make icacls handle links when protecting dirs

Author: KauzClay

modules/BOSH.Utils/BOSH.Utils.psm1

@@ -101,21 +101,21 @@ function Protect-Dir
     )
 
     Write-Log "Protect-Dir: Grant Administrator"
-    cmd.exe /c icacls.exe $path /T /grant:r Administrators:F
+    cmd.exe /c icacls.exe $path /T /L /grant:r Administrators:F
     if ($LASTEXITCODE -ne 0)
     {
         Throw "Error setting ACL for $path exited with $LASTEXITCODE"
     }
 
     Write-Log "Protect-Dir: Remove BUILTIN\Users"
-    cmd.exe /c icacls.exe $path /T /remove:g "BUILTIN\Users"
+    cmd.exe /c icacls.exe $path /T /L /remove:g "BUILTIN\Users"
     if ($LASTEXITCODE -ne 0)
     {
         Throw "Error setting ACL for $path exited with $LASTEXITCODE"
     }
 
     Write-Log "Protect-Dir: Remove BUILTIN\IIS_IUSRS"
-    cmd.exe /c icacls.exe $path /T /remove:g "BUILTIN\IIS_IUSRS"
+    cmd.exe /c icacls.exe $path /T /L /remove:g "BUILTIN\IIS_IUSRS"
     if ($LASTEXITCODE -ne 0)
     {
         Throw "Error setting ACL for $path exited with $LASTEXITCODE"