ADSSECURITY / NTFS permissions 
Author Message
 ADSSECURITY / NTFS permissions

Hi,

i'm using the following script to set "READ" permissions on a folder (just
the folder - no files, no subfolders) :

----
Const ADS_ACETYPE_ACCESS_ALLOWED = 0
Const ADS_RIGHT_GENERIC_READ = &H80000000
set objArgs = Wscript.Arguments
Set sec = CreateObject("ADsSecurity")
Set sd = sec.GetSecurityDescriptor("FILE://" +objargs(0))
Set dacl = sd.DiscretionaryAcl
Set ace = CreateObject("AccessControlEntry")
ace.Trustee = objArgs(1)
ace.AccessMask = ADS_RIGHT_GENERIC_READ
ace.AceType = ADS_ACETYPE_ACCESS_ALLOWED
dacl.AddAce ace
sd.DiscretionaryAcl = dacl
sec.SetSecurityDescriptor sd
----

syntax : script <folder> <user>

i'm calling the script in a batchfile on a win2k-server to set permissions
on several hundred of folders in a directory-tree.
the root folder ACL gets the most ACEs because every group gets access here.

the batch runs for a while and stops after several ACL-entries (~300) in the
root-folder. it looks like the ACL is "full" or something ...
the script aborts w/ the following error message :
Code : 800A0005
error : Invalid procedure call or argument
the error occurs in line 13 which is sec."SetSecurityDescriptor sd"

any idee ???

thanks a lot ...



Thu, 20 Nov 2003 02:13:55 GMT  
 
 [ 1 post ] 

 Relevant Pages 

1. changing NTFS permissions with ADsSecurity and multiple domains

2. Setting NTFS perms on NT4 with ADsSecurity.DLL

3. VbScript DeleteFile method failing due to permissions on W2KS NTFS with Everyone Full permissions

4. Permission Kanji File/Folders With ADsSecurity.dll

5. Using adssecurity.dll for share permissions

6. File and Registry Permission Using ADsSecurity.dll and Vbscript

7. ADSI/AdsSecurity and setting folder and file permissions

8. Permission Kanji File/Folders With ADsSecurity.dll

9. How read NT NTFS Permissions via ASP, Active Server Pages?, pcumming

10. NTFS and Share Permissions

11. Setting NTFS File Permissions

12. Share and NTFS Permissions

 

 
Powered by phpBB® Forum Software