Modifying nTSecurityDescriptor via MIIS

From: Hugh Kelley (hkelley_at_internosis.Kom)
Date: 05/23/05 

Date: Mon, 23 May 2005 17:27:24 -0400

Has anyone done this successfully?

I've been trying via both COM and P/Invoke interop to manipulate the
attribute for Active Directory user objects. I've run into dead ends with
each.

In the COM approach, the IADsSecurityUtility::ConvertSecurityDescriptor
method gives me a valid security descriptor from the MIIS-provided byte
array but I'm getting extra bits (as compared to the original byte array
once the SD has been converted back). Apparently the extra bits are
meaningless to Windows (the ACL is properly set after an MIIS export) but
they get discarded by AD, this causes some MIIS-specific issues.

In the Win32 approach the data just doesn't seem quite right. Some of the
functions work, like IsValidSecurityDescriptor() and IsValidAcl(), but
others, like SetSecurityDescriptorOwner, return error #1336
ERROR_INVALID_ACL. I'm hoping someone here can offer some suggestions about
what might cause this condition.

Hugh

Relevant Pages

  • Modifying nTSecurityDescriptor via MIIS
    ... attribute for Active Directory user objects. ... I've run into dead ends with ... array but I'm getting extra bits (as compared to the original byte array ...
    (microsoft.public.platformsdk.security)
  • Re: Get/Set Property for Array
    ... I know how to create the 8x8 array and fill the 8x8 array, ... how should one access array elements from outside of the class? ... The ArrayList has been dead since VS 2005, when I just instantiated an ArrayListobject in VS 2008 from the System.Collections? ...
    (microsoft.public.dotnet.languages.csharp)
  • IComparable Byte-Array Comparison
    ... I am trying to figure out how to make an IComparable Byte Array ... Comparison class in C# and keep running into dead ends. ... but wanted to ask on here if anyone had advice. ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: replace 1 col from 2D array problem (further question?)
    ... I tried hard but, my brain is dead now, please help? ... I would suggest you rattle through the rows using autoindexing, search for a match, then add the desired element, building an new output array. ... It is not very efficient to rewrite the entire array at each iteration with a property node! ...
    (comp.lang.labview)