Setting Rights to Specific Types of Objects
The following procedure shows how to set an ACE that can be inherited only by a specific class of objects.
To set an ACE that can be inherited only by a specific class of objects
- Set the IADsAccessControlEntry.AceType property to ADS_ACETYPE_ACCESS_ALLOWED_OBJECT or ADS_ACETYPE_ACCESS_DENIED_OBJECT.
- Set the IADsAccessControlEntry.AceFlags property to include the ADS_ACEFLAG_INHERIT_ACE flag.
- Set the IADsAccessControlEntry.InheritedObjectType property to the schemaIDGUID of the object class that can inherit the ACE.
- Set the IADsAccessControlEntry.Flags property to ADS_FLAG_INHERITED OBJECT_TYPE_PRESENT.
For more information and code examples that can be used to set this type of ACE, see Example Code for Setting an ACE on a Directory Object.