Microsoft KB Archive/285008

= DOC: Documentation About ADsSecurity.dll in the ADSI Resource Kit Is Incorrect =

Article ID: 285008

Article Last Modified on 2/12/2004

-

APPLIES TO


 * Microsoft Active Directory Service Interfaces 2.5
 * Microsoft Active Directory Service Interfaces 2.5

-



This article was previously published under Q285008



SUMMARY
The Platform Software Developer's Kit (SDK) documentation (Rtl.htm) incorrectly states that the IADsSecurity object's IADsSecurityDescriptor interface can be used to modify permissions on a shared network resource.

In fact, the IADsSecurityDescriptor interface implemented by ADsSecurity.dll cannot be used to modify the permissions on a shared network resource. The interface can be used to modify the permissions for a network file share's underlying directory if that directory is located on an NTFS drive.



MORE INFORMATION
If a file-share path is entered as input to the IADsSecurity::GetSecurityDescriptor interface, an IADsSecurityDescriptor object for the underlying directory is returned. If the shared folder is not on an NTFS partition, the IADsSecurity object will terminate abnormally, causing the calling program to stop execution.

You can use Windows Management Instrumentation (WMI) to modify permissions on a shared network resource.

