AceFlags under WinXp

From: Jerome (nospam_at_free.fr)
Date: 05/18/05 

Date: Wed, 18 May 2005 15:23:19 +0200

Hello everybody,

I'am facing a problem with ACL for a while. There is something, I don't
understand.
This happend on an XP Pro SP1 (but also on W2K)

First of all, there are the facts :
I create a folder Test under D:\ (which is NTFS) and a subfolder Test1 under
Test an so on to get something like
D:\test\test1\test2\fichier.txt
I look for the AceFlags with the GetAce function for each object.
In the AceFlags of the AceHeader of the different objects, i can't see the
AceFlag INHERITED_ACE.
That surprises me because Windows Explorer shows that inheritance is active
(which is true).

Moreover when i change the security of the folder d:\test to disable
inheritance for this folder, all subitems (file and folder) are marked with
the INHERITED_ACE flag.

My questions are:
Why windows doesn't add the INHERITED_ACE flag when I create a folder (or a
file) ?
What can I do to know if an ACE is herited or not ?

Thanks for your answers.
Jerome

Relevant Pages

  • Re: Confusion over IO (Inherit Only) ACE on Vista
    ... Earlier we discussed how default folder permissions created by FORMAT.EXE consist of two ACEs per group - one to set the explicit ACE, and one to control the inheritance of child objects. ... but shows ACE's on child folders with the flag set. ...
    (microsoft.public.platformsdk.security)
  • RE: Show folder Inheritance via script
    ... I'm far from being an expert on folder security and inheritance. ... Determine if a trustee's permission on a folder are the same permission as ...
    (microsoft.public.scripting.vbscript)
  • Re: Inheriting a Form within the same project
    ... > related to my ignorance about namespaces and location of the source code ... > the new Inherted form and using the inheritance browser. ... > public Class formnew: TestApp.baseform ... > I tried and tried until I copied my project to the root folder of the ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: programmatically change permissions on folder in windows?
    ... as seen in the Adv / Edit drill-in, then the new ACE ... if inheritance is blocked at some ... > programmatically change permissions on folder in windows ... > Then folder> security> Advanced> Permissions> Replace permission entries ...
    (microsoft.public.win2000.security)
  • SACL using WMI.
    ... I used WMI with ChangeSecurityPermissions and was able to add SACL to my ... I am still having problems with inheritance and setting ControlFlags on ... on the root folder (at least this is what my other script and SubInACL ...
    (microsoft.public.win2000.security)