Grant User Permissions on the Computer

2008-06-24

The application retrieves the underlying DirectoryEntry object for the computer principal. The permissions are then set on the computer in the ObjectSecurity property.

        private static void GrantUserPermissionsOnComputerObject(UserPrincipal userPrincipal, ComputerPrincipal computerPrincipal)
        {
            if (computerPrincipal.GetUnderlyingObjectType() == typeof(DirectoryEntry))
            {
                DirectoryEntry computerEntry = (DirectoryEntry) computerPrincipal.GetUnderlyingObject();
                ActiveDirectorySecurity objectSecurity = computerEntry.ObjectSecurity;
                ActiveDirectoryAccessRule accessRule = new ActiveDirectoryAccessRule(userPrincipal.Sid, ActiveDirectoryRights.GenericAll, System.Security.AccessControl.AccessControlType.Allow);
                objectSecurity.AddAccessRule(accessRule);
                computerEntry.CommitChanges();
            }
        }

Share via

Grant User Permissions on the Computer

See Also

Reference

Concepts

Additional resources