Continued from post 1
Case3: In set info request, security descriptor contains both DACL and SACL and both “SACL present” and “DACL present” flags have been set in the security descriptor header.
In the create request, the flags WRITE_DAC and ACCESS_SYSTEM_SECURITY have been set. The following is the set info request capture.
The set info response returns an error: STATUS_INVALID_PARAMETER.
Case 4: The security descriptor contains both SACL and DACL, but only “SACL present” flag is set in the security descriptor header.
In the create request, the flags WRITE_DAC and ACCESS_SYSTEM_SECURITY have been set. The following is the set info request capture.
Set info succeeds. Get info shows the set SACL.
Continued in post 3.
Post 1:- social.technet.microsoft.com/Forums/windowsserver/en-US/cc5ba5f7-4796-497d-9ff9-7f9996d6c92b/sacl-and-dacl-is-not-woking-together-while-trying-to-set-acl-on-an-object?forum=winserverfiles
Post 3:- http://social.technet.microsoft.com/Forums/windowsserver/en-US/6d6a9e2b-dd9f-45ed-93c8-a830607afd55/sacl-and-dacl-is-not-woking-together-while-trying-to-set-acl-on-an-objectcontinued-post-3?forum=winserverfiles