I am setting permission to AD user object with c++. I am able to create All other ACEs other than "Create/Delete <Object-Name> Object" type permissions alone. For example, i am trying to create "Create ms-net-ieee-80211-Group
Poicy Object" but i get "Create all Child Objects" ACE created instead. When i read the ACE of "Create/Delete ms-net-ieee-80211-Group Poicy Object", the AccessMask for it was 3. Hence i tried created the ACE with Access Mask as 3.
But, instead it sets "" permission. Is there anything missed out in the creation of that permission?
- Santron Manibharathi.