Directory Services

Setting Access Rights on the Entire Object

Certain permissions can be set only for the entire object, such as Delete, List Contents, and so on. Granular permissions such as the Read Property can also be set for entire object so that they apply to entire object.

To set permissions that apply to the entire object:

For a discussion of the steps for creating an ACE, see Setting Access Rights on an Object.

For additional C++ and Visual Basic sample code for setting an ACE, see: