How to create a folder that inherits its parent’s ACL, and then overrides part of it – The Old New Thing
Posted by jpluimers on 2018/05/08
create the directory without an explicit security descriptor and let the experts create it with the default security descriptor, which takes into account all the inheritance rules. And then modify the security descriptor post-creation to include the new ACE you want. Fortunately, MSDN has sample code for how to add an ACE to an existing security descriptor.
via: [WayBack] How to create a folder that inherits its parent’s ACL, and then overrides part of it – The Old New Thing
–jeroen
Leave a Reply