Think this is one of these "pass by reference" thingies, even though the docs say it is passed by value, here how far i've got so far, unable to pull-out the security descriptor yet. But might be able to see whether that slashy is an issue or not.

break on

$sec = GetObject ("winmgmts:Win32_LogicalFileSecuritySetting.path='f:\t.kix'")

$flags = $sec.controlflags

exit

$SE_OWNER_DEFAULTED = 1
$SE_GROUP_DEFAULTED = 2
$SE_DACL_PRESENT = 4
$SE_DACL_DEFAULTED = 8
$SE_SACL_PRESENT = 16
$SE_SACL_DEFAULTED = 32
$SE_DACL_AUTO_INHERIT_REQ = 256
$SE_SACL_AUTO_INHERIT_REQ = 512
$SE_DACL_AUTO_INHERITED = 1024
$SE_SACL_AUTO_INHERITED = 2048
$SE_DACL_PROTECTED = 4096
$SE_SACL_PROTECTED = 8192
$SE_SELF_RELATIVE = 32768