NTFS Folder Security (Windows 2000) *Resolved*

[rudvs2]

Okay chaps

I know how to add a user to a folders Descritionary Ace list in win 2k using code thats no hassle

Where I am running into problems is that I want to add the person with full control

It does seem to do this. But only in the advanced properties

If you just right click the folder select security an error box appears wanring that the permissions are not set correctly when you click okay it shows the new User i have added but none of the check boxes specifiying security permissions are checked

If you then click on advanced it says that this user does have full control???

What I need help on is setting the correct properties to check the approiate check boxes in the default Security tab.

Has anyone done this before??

[rudvs2]

here is the code I am using to add the Ace

Public Function SetSecurityShare() As Long
Dim oSec As New ADsSecurity
Dim oSd As IADsSecurityDescriptor
Dim oDacl As IADsAccessControlList
Dim oNewAce As New AccessControlEntry
Dim oRemAce As AccessControlEntry
Dim strUserName As String
Dim strHome As String
Dim strProfile As String
Dim strServer As String
Dim strPath As String
 
 
'Retrieve relevant values
strUserName = mvarpUserNm
strServer = mvarpServer
strHome = mvarpHome & "\" & strUserName
strProfile = mvarpProfile & "\" & strUserName & ".Profile"
strPath = "FILE://" & strHome
 
'initialise the Security objects
Set oSd = oSec.GetSecurityDescriptor(strPath)
Set oDacl = oSd.DiscretionaryAcl
Set oRemAce = New AccessControlEntry
 
'create the new Ace
oNewAce.Trustee = mvarpServer & "\Administrator"
oNewAce.AccessMask = ADS_RIGHT_GENERIC_ALL Or ADS_RIGHT_GENERIC_WRITE Or ADS_RIGHT_GENERIC_EXECUTE _
Or ADS_RIGHT_GENERIC_READ
'the values above set the permission level for the ACE
 
oNewAce.AceType = ADS_ACETYPE_ACCESS_ALLOWED
'oRemAce.AceType = ADS_ACETYPE_ACCESS_ALLOWED
oDacl.AddAce newAce
'oRemAce.Trustee = "Everyone"
'oDacl.RemoveAce remAce
oSd.DiscretionaryAcl = oDacl
oSec.SetSecurityDescriptor oSd
 
 
End Function

As I mentioned earlier this code does work but doesnt seem to set the totally correctly