Modifying DACL

From: Thomas Iwang (ti_at_ds.adp.dk)
Date: 11/08/03


Date: Sat, 8 Nov 2003 11:51:47 -0800


Hi folks
I have an minor problem - I am trying to create an vbs
script which can modify the DACL for an given file - but I
am not sure how to do - can somebody help?? I have this
piece of code:

' Obtain the trustee for each access control entry (ACE)
and change the permissions
' in the AccessMask for each ACE to read, write, and
delete.

For each wmiAce in DACL
  if (LCase(wmiAce.Trustee.Domain) = LCase("BUILTIN")) Then
            ???? how do I remove this ACL from the DACL ???
               wscript.echo "Removing buildin account"
       end if
next

Can somebody help me how to remove the ACL from the DACL ??

Kind regards

Thomas Iwang



Relevant Pages

  • Audit Exchange Permissions script
    ... ' Extract the Discretionary Access Control List (DACL) using the ... Set ace = CreateObject ... ' ACEs on a DACL for the Exchange 2000 mailbox. ... 'wscript.echo "Trustee, AccessMask, ACEType, ACEFlags, Flags, ...
    (microsoft.public.scripting.vbscript)
  • Re: Give mailbox rights to other user
    ... I am trying to give other user full control rights to some else mailbox. ... ' Extract the Discretionary Access Control List (DACL) using the ... Set ace = CreateObject ... for the Exchange 2003/2000 mailbox with the Trustee specified in sTrustee, ...
    (microsoft.public.exchange.development)
  • Re: Audit Exchange Mailbox Permissions IMailboxStore
    ... this works by specifying the dn for eachmailboxyou wish to query. ... ' Extract the Discretionary Access Control List (DACL) using the ... Set ace = CreateObject ... 'wscript.echo "Trustee, AccessMask, ACEType, ACEFlags, Flags, ...
    (microsoft.public.windows.server.scripting)
  • Strange behavior when setting ACL on NTFS Folder
    ... ACE entry on it, using the right-click properties Explorer UI. ... I create a "patient" folder under acltest using the first pasted ... actually write them out into whatever Security mechanism NTFS ... 'Specified User or Group was NOT found in the existing DACL. ...
    (microsoft.public.win32.programmer.wmi)
  • Strange behavior when setting ACL on NTFS Folder
    ... ACE entry on it, using the right-click properties Explorer UI. ... I create a "patient" folder under acltest using the first pasted ... actually write them out into whatever Security mechanism NTFS ... 'Specified User or Group was NOT found in the existing DACL. ...
    (microsoft.public.scripting.vbscript)