How to read ACLs in AD with dotnet managed C# ?

[=?Utf-8?B?Q2hyaXN0aWFuIGZyb20gRnJhbmNl?=]

I want to do the folllowing in C# :
I have a DirectoryEntry :
DirectoryEntry usr = new DirectoryEntry( "LDAP://cn=Mike,ou=User s,dc=MyDc");

With "AD Users & Computers" Security tab an administrator had give to some
users the right to write the accountExpires property of this Account.
I want to read the ACLs on this object and obtain the list on the users who
have this right.
How can i do ?

Thanks


Christian

[Joe Kaplan]

Re: How to read ACLs in AD with dotnet managed C# ?

Use the ObjectSecurity property to access the security descriptor as a .NET
managed type.

Joe K.
--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services Programming"

http://www.directoryprogramming.net

--
"Christian from France" <Christian from France@discussi ons.microsoft.c om>
wrote in message news:0AAF40E5-032B-47A0-879B-C245FEBDA648@mi crosoft.com...

>I want to do the folllowing in C# :
I have a DirectoryEntry :
DirectoryEntry usr = new
DirectoryEntry( "LDAP://cn=Mike,ou=User s,dc=MyDc");
>
With "AD Users & Computers" Security tab an administrator had give to some
users the right to write the accountExpires property of this Account.
I want to read the ACLs on this object and obtain the list on the users
who
have this right.
How can i do ?
>
Thanks
>
>
Christian
>