Directory Services

Setting Permissions on Child Object Operations

Permissions (such as Create Child and Delete Child) can also be granted or denied for operations on all subobjects or subobjects that are of a specific class.

To set permissions for a specific subobject type:

For a discussion of the steps for creating an ACE, see Setting Access Rights on an Object.

For additional C++ and Visual Basic sample code for setting an ACE that controls child object operations, see: