Sign in with
Sign up | Sign in
Your question

Need Help programmatically setting AD Permissions

Last response: in Windows 2000/NT
Share
Anonymous
February 23, 2005 7:51:36 PM

Archived from groups: microsoft.public.dotnet.languages.vb,microsoft.public.win2000.security (More info?)

Hey folks,
I am in desparate need of help to solve my problem.

I have written a service that examines a table in a database, and creates a
directory hierarchy based on data in the table. It then programmatically
grants and revokes privileges to groups on the different directories in the
hierarchy.

It creates the directories correctly, and on my XP development machine, it
assigns the privileges correctly.
When I deploy it to the target machine (Win 2k server), when I look at the
security in the directories, I get a message the that rights are out of
order. I have to manually go into explorer, look at securty and let it
reorder it for the privileges to work correctly.

I've used the knowledge base article (269159-How to use VB and ADsSecurity
to property order ACEs in and ACL) to write a reorder function.

The function, however, dies on the last line, calling the
SetSecurityDescriptor method with an ArgumentException. The helpful message
was "The parameter is incorrect".

Has anyone done this on a 2k machine, found the error, and know how to
"correct" the parameter?

I've seen a few other people on the web have this problem, but I couldn't
find any answers.
Anonymous
March 1, 2005 1:03:06 AM

Archived from groups: microsoft.public.dotnet.languages.vb,microsoft.public.win2000.security (More info?)

You could try psexec to run the session locally. Psexec is at this link
http://www.sysinternals.com/ntw2k/freeware/psexec.shtml

This is assuming you have a rights issue.


"Buddy Robbins" <buddy.robbins@rimrockgroup.com> wrote in message
news:%23eQ4cKgGFHA.2732@TK2MSFTNGP15.phx.gbl...
> Hey folks,
> I am in desparate need of help to solve my problem.
>
> I have written a service that examines a table in a database, and creates
> a directory hierarchy based on data in the table. It then
> programmatically grants and revokes privileges to groups on the different
> directories in the hierarchy.
>
> It creates the directories correctly, and on my XP development machine, it
> assigns the privileges correctly.
> When I deploy it to the target machine (Win 2k server), when I look at the
> security in the directories, I get a message the that rights are out of
> order. I have to manually go into explorer, look at securty and let it
> reorder it for the privileges to work correctly.
>
> I've used the knowledge base article (269159-How to use VB and ADsSecurity
> to property order ACEs in and ACL) to write a reorder function.
>
> The function, however, dies on the last line, calling the
> SetSecurityDescriptor method with an ArgumentException. The helpful
> message was "The parameter is incorrect".
>
> Has anyone done this on a 2k machine, found the error, and know how to
> "correct" the parameter?
>
> I've seen a few other people on the web have this problem, but I couldn't
> find any answers.
>
!