(imported comment written by Robert_Whelan91)
Hello Ben,
I did get you message and thank you for your call.
See if that gives you the information you are looking for or if it throws some sort of error…
I tried that and everything works fine.
For Paul: QNA version = 7.0.9.164
I wanted to keep this simple and understand the problem before I muddy the waters anymore with our specific query. So, staying with the samples on page 261 I popped over to another VM running Vista as opposed to XP, ran the samples and they worked. That led me to look at the diff between the two machines. One thing I noted is that I was using a domain account on Vista and not XP. Keep in mind that both accounts have local Admin rights. However, the XP account was local to the machine.
Here you go.
Logged in to a domain account with local Admin rights:
Q: effective access mode for “Administrators” of dacls of security descriptors of system folder as hexadecimal
A: 1f01ff
Q: effective append permission for “Power Users” of dacls of security descriptors of windows folder
E: Singular expression refers to nonexistent object.
Q: effective synchronize permission for “Administrators” of dacls of security descriptors of system folder
A: True
Q: effective create folder permissions for “Administrators” of dacls of security descriptors of folders of folder "c:"
A: True
A: True
A: True
A: False
A: True
A: True
A: True
Logged in with local machine Admin account:
Q: effective access mode for “Administrators” of dacls of security descriptors of system folder as hexadecimal
E: Singular expression refers to nonexistent object.
Q: effective append permission for “Power Users” of dacls of security descriptors of windows folder
E: Singular expression refers to nonexistent object.
Q: effective synchronize permission for “Administrators” of dacls of security descriptors of system folder
E: Singular expression refers to nonexistent object.
Q: effective create folder permissions for “Administrators” of dacls of security descriptors of folders of folder "c:"
A: False
It seems to us that this may be problematic since the BESClient is a local account to the machine. I didn’t have a chance to look further into the API you might be using yet. I’m also wondering if it would work if I changed the login account of the BESClient to a domain account and granted it login as service privileges etc… Obviously, this would not be a good solution but would only prove out the point the API call expects access to the domain.
The bottom line is this explains why I’ve been struggling with some of these commands and started the thread. Something I expected to work in the debugger kept throwing errors and it made me believe it was syntax problems or a complete lack of understanding of the relevance language. (I still don’t get it though.
Thanks
Robert