Hi,
When I add/modify access rights based on the Win32_ACE class, there seems to be a difference in the result, then when setting it with the GUI in Windows.
The situation is as follow:
I want to set Modify access on a remote folder, but also want to avoid deletion of the folder itself. This can easily be done by setting "deny delete on this folder only" in addition to "allow modify to this folder, files and subfolders".
So far no issue.
Now I notice that, although the GUI shows exactly the same result in advanced settings of the security property, the folder set with WMI script gives a deny when opening it with the user account. The same folder, set with the same security and result in the advanced tab, but set in the GUI, works fine.
Note: The reason that I use WMI is because the remote system is a standalone machine, not sharing the same domain or trust.
I compared the ACEFlags, AceType and AccessMask for both the GUI set and script set permissions, and they are exactly the same.
GUI => AccessMask:1179817 AceType:0 iAceFlags:3
Script => AccessMask:1179817 AceType:0 iAceFlags:3
What a strange world we live in... :-)
Any idea?