Microsoft KB Archive/260307

{|
 * width="100%"|

INFO: The GetExplicitEntriesFromAcl Function Returns the Incorrect Number of ACEs

 * }

Q260307

-

The information in this article applies to:


 * Microsoft Win32 Application Programming Interface (API), included with:
 * the operating system: Microsoft Windows 2000

-

SUMMARY
The GetExplicitEntriesFromAcl function does not return any access control entries (ACEs) that are marked with the INHERITED_ACE flag.

MORE INFORMATION
The INHERITED_ACE flag is new for Windows 2000. The flag indicates that the ACE was propagated by a parent object.

To obtain all ACEs, including ACEs that are marked with the INHERITED_ACE flag, the following low-level security functions should be used instead of GetExplictEntriesFromAcl:


 * GetAclInformation
 * GetAce
 * LookupAccountSid

Additional query words:

Keywords : kbAPI kbKernBase kbOSWin2000 kbSDKPlatform kbSDKWin32 kbDSupport kbGrpDSKernBase

Issue type : kbinfo

Technology : kbAudDeveloper kbWin32sSearch kbWin32API