DirectoryInfo.SetAccessControl Method (DirectorySecurity)


The .NET API Reference documentation has a new home. Visit the .NET API Browser on to see the new experience.

Applies access control list (ACL) entries described by a DirectorySecurity object to the directory described by the current DirectoryInfo object.

Namespace:   System.IO
Assembly:  mscorlib (in mscorlib.dll)

member SetAccessControl : 
        directorySecurity:DirectorySecurity -> unit


Type: System.Security.AccessControl.DirectorySecurity

An object that describes an ACL entry to apply to the directory described by the path parameter.

Exception Condition

The directorySecurity parameter is null.


The file could not be found or modified.


The current process does not have access to open the file.


The current operating system is not Microsoft Windows 2000 or later.

An access control list (ACL) describes individuals and/or groups who have, or do not have, rights to specific actions on the given file or directory. For more information, see How to: Add or Remove Access Control List Entries.

The SetAccessControl method applies ACL entries to a file that represents the noninherited ACL list.


The ACL specified for directorySecurity replaces the existing ACL for the directory. To add permissions for a new user, use the GetAccessControl method to obtain the existing ACL, and modify it.

The SetAccessControl method persists only DirectorySecurity objects that have been modified after object creation.  If a DirectorySecurity object has not been modified, it will not be persisted to a file.  Therefore, it is not possible to retrieve a DirectorySecurity object from one file and reapply the same object to another file.

To copy ACL information from one file to another:

  1. Use the GetAccessControl method to retrieve the DirectorySecurity object from the source file.

  2. Create a new DirectorySecurity object for the destination file.

  3. Use the GetSecurityDescriptorBinaryForm or GetSecurityDescriptorSddlForm method of the source DirectorySecurity object to retrieve the ACL information.

  4. Use the SetSecurityDescriptorBinaryForm or SetSecurityDescriptorSddlForm method to copy the information retrieved in step 3 to the destination DirectorySecurity object.

  5. Set the destination DirectorySecurity object to the destination file using the SetAccessControl method.

The following example uses the GetAccessControl and SetAccessControl methods to add and then remove an access control list (ACL) entry from a directory.

No code example is currently available or this language may not be supported.


for permission to enumerate access control list (ACL) for a directory. Security action: Demand. Associated enumerations: FileIOPermissionAccess.NoAccess, AccessControlActions.View

.NET Framework
Available since 2.0
Return to top