Compliance check of NTFS permission on the vCenter server

I am being asked to write a compliance script, part of it being a check against the NTFS permissions for the folder that holds the vCenter certificates to ensure correct access

Has anyone done this? Any ideas how best to tackle this?

Any help appreciated

Thanks