Export (0) Print
Expand All
This topic has not yet been rated - Rate this topic

Accessing Item Descriptors

Exchange Server 2003

When generating the XML version of any given descriptor, the item's security properties are not returned automatically. To view or modify an item's descriptor in XML format, you must bind to the item and request the property directly, as in the following example:


Dim Rec as New ADODB.Record
Dim Conn as New ADODB.Connection
Dim Flds as ADODB.Fields
Dim strXMLDesc as String
Dim strXMLAdminDesc as String

Conn.Provider = "ExOLEDB.DataSource"
Conn.Open strItemURL
Rec.Open strItemURL, Conn
Set Flds = Rec.Fields
strXMLDesc=Flds("http://schemas.microsoft.com/exchange/security/descriptor")

Note that access to the item's security descriptor itself is specified using the following standard access rights:

  • READ_CONTROL   Only trustees (users and groups) granted the standard READ_CONTROL access right can examine the security descriptor.
  • WRITE_DAC   Only trustees granted the WRITE_DAC access right can modify the discretionary access control list (ACL).
  • WRITE_OWNER   Only trustees granted the WRITE_OWNER access right can change the item's owner.
Did you find this helpful?
(1500 characters remaining)
Thank you for your feedback
Show:
© 2014 Microsoft. All rights reserved.