Using ADsSecurity.dll (Visual Basic)

This code can be found in Chapter 4 of Managing Enterprise Active Directory Services

Purchase XP Cookbook or Networking Recipes for only $25 plus shipping! While supplies last.

Find out how to download all of the Visual Basic code from this site.

'# ----------------------------------------------------------------
'# From the book "Managing Enterprise Active Directory Services"
'# ISBN: 0-672-32125-4
'# ----------------------------------------------------------------
Dim Obj as IADs
Dim SecurityDescriptor as IADsSecurityDescriptor
Dim ACE as AccessControlEntry
Dim DACL as AccessControlList
Set Obj = GetObject("LDAP://ou=Admins,dc=xyz,dc=com")
Set SecurityDescriptor = Obj.Get("ntSecurityDescriptor")
Set DACL = SecurityDescriptor.DiscretionaryACL
Set ACE = CreateObject("AccessControlEntry")
ACE.AccessMask = ADS_RIGHT_DELETE Or ADS_RIGHT_GENERIC_READ Or ADS_RIGHT_GENERIC_WRITE
ACE.AceFlags = ADS_ADSFLAG_NO_PROPOGATE_INHERIT_ACE
ACE.AceType = ADS_ACETYPE_ACCESS_ALLOWED
ACE.Trustee = "jdoe@xyz.com"
DACL.AddAce ACE
SecurityDescriptor.DiscretionaryACL = DACL
Obj.Put "ntSecurityDescriptor",Array(SecurityDescriptor)
Obj.SetInfo

This code has been viewed 2838 times.

New from the creators of TechTasks.com: StatSheet.com