0

I unable to read security descriptor of a folder from service.

The folder is created by a Limited user. Administrators Group is Denied "Read and Execute" control. Limited user & System user has full access. I have an elevated token privileged for - "SE_SECURITY_NAME", "SE_BACKUP_NAME", "SE_RESTORE_NAME" and "SE_DEBUG_NAME".

GetNamedSecurityInfo fails with Error Code 5 (Access Denied).

Full marks for anybody that can even be remotely of help. Thanks in advance.

-- Varun

4

1 回答 1

1

一个潜在的原因可能是，令牌的安全描述符（代表您的服务）的权限具有所需的权限，但这些权限尚未启用。

于 2012-06-11T15:49:33.840 回答