retrieves owner of a Windows profile directory

GetProfileOwner.ps1

[CmdletBinding()]
Param(
	[Parameter(Mandatory=$True,Position=1)]
	[string] $Path
)

# Usually the profile owner has full control, but is not a well-known SID
# References: 
# https://support.microsoft.com/en-us/help/243330/well-known-security-identifiers-in-windows-operating-systems
# https://technet.microsoft.com/en-us/library/ff730940.aspx
function GetProfileOwner([string] $path) {
	try {
		$acl = New-Object System.Security.AccessControl.DirectorySecurity $path, @('access')
		#$all_sids = $acl.Access | %{ $_.IdentityReference.Translate([System.Security.Principal.SecurityIdentifier]) }

		[System.Security.Principal.IdentityReference] $owner = $null
		foreach ($ace in $acl.Access) {
			$id = $ace.IdentityReference
			$sid = $id.Translate([System.Security.Principal.SecurityIdentifier])
			if ($sid.AccountDomainSid) { # well-known SIDs have no domain SID
				$owner = $id
				break
			 }
		}
		return $owner
	} catch {
		throw
	}
}

if (!(Test-Path $Path)) {
    throw "path not found $Path"
}

$owner = GetProfileOwner $Path
if ($owner) {
	Write-Host $owner
} else {
	exit 1
}