Translate BUILTIN to domain name

Hello group

I'm trying to list the users and groups who has read access to a file.

I use .NET 2.0 and FileInfo.GetAccessControl().GetAccessRules(...) and then
loop through the FileSystemAccessRule objects. Using these objects, I can
get the NTAccount object using the IdentityReference property.

I have a problem with the "well known" accounts, because they return the
same name for each computer that I ask. E.g. the Users account is called
BUILTIN\Users on my computer. I need to translate this BUILTIN domain name
to an actual computer or domain name. Just like it is done when I click on
the Security tab of the file property dialog.

If it is on my local computer, I guess that I sould just translate it into
the local computer name. However, what should I do if it is on a remote
computer? If the remote computer is a Domain controller, it looks as if I
should translate it to <DOMAIN>\Users instead of <COMPUTERNAME>\Users.

Is there a nice way to do this translation? It should be possible, because
Windows does it when you look at the Security tab on a file property dialog.
Is it possible to do using .NET?

Thank you for your help

Regards
Anders




.

Relevant Pages

  • RE: Translate BUILTIN to domain name
    ... If you log on to local computer, they will have value computer name. ... If it is on my local computer, I guess that I sould just translate it into ... If the remote computer is a Domain controller, ...
    (microsoft.public.dotnet.security)
  • Translate BUILTIN to domain name
    ... If it is on my local computer, I guess that I sould just translate it into ... If the remote computer is a Domain controller, ...
    (microsoft.public.dotnet.languages.csharp)