setting and retrieving NTFS permissons for local groups and users

[Neo]

Hi Everyone
I am trying to set and retrieve NTFS permssions for
fileshares on remote machine using ActiveDs Interop. It works for domain
groups and users but when try to retrieve permssions for local groups and
users it gives me dangling SIDs. While setting permssions how can I indicate
whether the user or group is local or a domain group ?.
Following is the code snippet I am using for retrieving permissions

string folderPath = @"\\machinename \e$\test";

IADsAccessContr olList daclnew ;

ADsSecurityUtil ityClass secuUtil = new ADsSecurityUtil ityClass();

//Getting security decriptor

object ob = secuUtil.GetSec urityDescriptor (

folderPath,

(int)ActiveDs.A DS_PATHTYPE_ENU M.ADS_PATH_FILE ,

(int)ActiveDs.A DS_SD_FORMAT_EN UM.ADS_SD_FORMA T_IID

);

ActiveDs.IADsSe curityDescripto r securitydescrip tor =
(IADsSecurityDe scriptor)ob;

ActiveDs.IADsAc cessControlList obDacl = ( ActiveDs.IADsAc cessControlList )

securitydescrip tor.Discretiona ryAcl;

daclnew = (IADsAccessCont rolList)obDacl;

foreach(IADsAcc essControlEntry entry in daclnew)

{

if( entry.AceType == (int)ADS_ACETYP E_ENUM.ADS_ACET YPE_ACCESS_ALLO WED )

{

Console.WriteLi ne( entry.Trustee );

}

}
Following is the code snippet I am using to set permssion:

ADsSecurityUtil ityClass secuUtil = new ADsSecurityUtil ityClass();

//Getting security decriptor

object ob = secuUtil.GetSec urityDescriptor (

folderPath,

(int)ActiveDs.A DS_PATHTYPE_ENU M.ADS_PATH_FILE ,

(int)ActiveDs.A DS_SD_FORMAT_EN UM.ADS_SD_FORMA T_IID

);

if ( null != ob )

{

ActiveDs.IADsSe curityDescripto r securitydescrip tor =
(IADsSecurityDe scriptor)ob;
if( allowTrusteeLis t != null )

{

for( int trustee = 0; trustee < allowTrusteeLis t.Length; trustee++ )

{

ActiveDs.IADsAc cessControlList obDacl = (
ActiveDs.IADsAc cessControlList )

securitydescrip tor.Discretiona ryAcl;

Allow = new AccessControlEn tryClass();

//For recursive security settings

Allow.AceFlags = 3;

//ACE is allow type

Allow.AceType = (int)ADS_ACETYP E_ENUM.ADS_ACET YPE_ACCESS_ALLO WED;

//storing trustee

Allow.Trustee = SetSecurityTrus tee( allowTrusteeLis t[trustee] );

//Allow.Trustee = allowTrusteeLis t[trustee];

AppendLog( 1, "Creating allow accessmask for trustee: " +
allowTrusteeLis t[trustee] );

//creating access mask

if( !CreateAccessMa sk( Allow, true, trustee ) )

{

return false;

}

obDacl.AddAce(A llow);

}