STRONGM - Get Folder ACE Flag to see if it inherits permissions 2

[TheTuna]

StrongM, if you're available, I'm in a pinch...

Or if anyone knows a quick solution for this issue:

I need to look at a folder and determine if it inherits permissions from its parent folder.

I've been researching the FSO for a way to access ACE flags and I can't find a solution there.

I've been studying GetACE and GetSecurityInfo (all the info I can find on the web) and all I can manage to find is how to set flags, but nothing that tells how to just get the propery of a folder and report if it inherits permissions or not.

Can anyone help? It would be very, very appreciated since we're in a big hurry on this one.

Thanks!

No Dolphins were harmed in the posting of this message... Dolphin Friendly Tuna!

Ever feel like you're banging your head against a tree? I did, so I cut down the tree.

 

[CaptainD]

I found this, will it work?

http://www.microsoft.com/technet/scriptcenter/csc/tips/ps/acl.mspx

 

[PatrickIRL]

... and I came across this, hope it helps.

http://www.thescripts.com/forum/thread371202.html

Patrick

 

[strongm]

FSO won't do it.

But I recall it can be done through WMI (I'm afraid I'm nowhere near a VB machine today, so I can't really help with code).

Have a look at the Win32_LogicalFileSecuritySetting WMI class, which allows you to retrieve security descriptors that should provide the info that you need

 

[TheTuna]

Thanks everyone... I'll try to sort it out with this new info!

No Dolphins were harmed in the posting of this message... Dolphin Friendly Tuna!

Ever feel like you're banging your head against a tree? I did, so I cut down the tree.

 

[strongm]

Here's an illustrative example I put together in VBA

[blue]Option Explicit

Const AUTO_INHERIT_DACL = &H400

Public Sub Example()
Dim strComputer As String
Dim objWMIService As Object
Dim SecurityDescriptor As Object
Dim objItem As Object

strComputer = "." ' Local computer
Set objWMIService = GetObject("winmgmts:\\" & strComputer & "\root\CIMV2") ' Get the WMI Service

For Each objItem In objWMIService.ExecQuery("SELECT * FROM Win32_LogicalFileSecuritySetting WHERE Path='C:\\Program Files'")
    If objItem.GetSecurityDescriptor(SecurityDescriptor) = 0 Then
        With SecurityDescriptor
            Debug.Print "Folder: " & objItem.Path
            Debug.Print "Owner: " & .Owner.Domain & "\" & .Owner.Name
            Debug.Print "Permissions automatically inherited from parent: " & ((.ControlFlags And AUTO_INHERIT_DACL) > 0)
        End With
    End If
Next

End Sub[/blue]

 

[TheTuna]

Thanks again everyone, and strongm... YOU NAILED IT! Thanks!

No Dolphins were harmed in the posting of this message... Dolphin Friendly Tuna!

Ever feel like you're banging your head against a tree? I did, so I cut down the tree.

 

[strongm]

No problem; I had a quiet moment ...