Setting Access Rights on the Entire Object

Certain permissions can be set only for the entire object, such as Delete, List Contents, and so on. Granular permissions such as the Read Property can also be set for entire object so that they apply to entire object.

To set permissions that apply to the entire object:

• Set AceType to ADS_ACETYPE_ACCESS_ALLOWED or ADS_ACETYPE_ACCESS_DENIED
• Set ObjectType and InheritedObjectType to NULL

For a discussion of the steps for creating an ACE, see Setting Access Rights on an Object.

For additional C++ and Visual Basic sample code for setting an ACE, see:

• Example Code for Setting an ACE on a Directory Object