Hi,
When I add/modify access rights based on the Win32_SecurityDescriptor class, there seems to be a difference in the effect then when setting it with the GUI in Windows. The situation is as follow: I want to set Modify access on a remote folder but also want
to add to not allow to the delete the folder itself. This is easily done by set deny delete on this folder only in addition to allow modify to this folders, files and subfolders. So far no issue.
Now I notice that although the GUI shows exactly the same result in advanced settings of the security property of the folder, the folder set with WMI gives a deny when opening it with the user. And the same folder, set with the same security, but in the
GUI, works fine. The reason that I use WMI is because the remote system is a standalone machine, not sharing the same domain or trust.
I compared the ACEFlags, AceType and AccessMask and they are exactly the same.
Manually=> AccessMask:1179 ...
Go to the complete details ...