SetSecurityDescriptorControl can't modify SE_DACL_PRESENT
or SE_SELF_RELATIVE. It should work if you remove them
from the bitmask. And since it's a bitmask, they should be combined
with a bitwise or instead of +, eg
SE_DACL_PROTECTED | SE_DACL_AUTO_INHERITED
hth
Roger
_
G'day all,
I am trying to get inheritance enabled/disabled working on some
folders and I cannot work out what I am doing wrong.
I am doing something like this
ALLOW_INHERITANCE=SE_SELF_RELATIVE + SE_DACL_AUTO_INHERITED +
SE_DACL_PRESENT
DENY_INHERITANCE=SE_SELF_RELATIVE + SE_DACL_PROTECTED +
SE_D