Private Sub ApplyPermissions(ByRef path As String, ByRef usrname As _
          String, ByRef permission As Object)
            Me.adsSecurity = New ADsSecurity
            Me.securityDescriptor = Me.adsSecurity.GetSecurityDescriptor( _
              "FILE://" & path)
            Me.discretionaryAcl = Me.securityDescriptor.DiscretionaryAcl
            Me.adsSid = New ADsSID
            Me.adsSid.SetAs(ADS_SID_SAM, CStr(usrname))
            Me.adsSidHex = Me.adsSid.GetAs(ADS_SID_SDDL)
            '----Add a new ACE so User has Full Control on Files.
            Me.accessControlEntryFiles = New AccessControlEntry
            Me.accessControlEntryFiles.Trustee = Me.adsSidHex
            Me.accessControlEntryFiles.AccessMask = permission
            Me.accessControlEntryFiles.AceType = ADS_ACETYPE_ACCESS_ALLOWED
            Me.accessControlEntryFiles.AceFlags = ADS_ACEFLAG_INHERIT_ACE Or _
              ADS_ACEFLAG_INHERIT_ONLY_ACE Or 1
            Me.discretionaryAcl.AddAce(Me.accessControlEntryFiles)
            '----Add a new ACE so User has Full Control on Folders.
            Me.accessControlEntryFolders = New AccessControlEntry
            Me.accessControlEntryFolders.Trustee = Me.adsSidHex
            Me.accessControlEntryFolders.AccessMask = permission
            Me.accessControlEntryFolders.AceType = ADS_ACETYPE_ACCESS_ALLOWED
            Me.accessControlEntryFolders.AceFlags = ADS_ACEFLAG_INHERIT_ACE Or 1
            Me.discretionaryAcl.AddAce(Me.accessControlEntryFolders)
 
            Me.securityDescriptor.DiscretionaryAcl = Me.discretionaryAcl
            Me.adsSecurity.SetSecurityDescriptor(Me.securityDescriptor)
        End Sub
 
        Private Sub RemoveInheritedAce(ByVal userPath As String)
            Try
                Dim tempAdsSecurity As ADsSecurity = New ADsSecurity
                Dim tempSecurityDescriptor As SecurityDescriptor = _
                  tempAdsSecurity.GetSecurityDescriptor("FILE://" & userPath)
                Dim tempDiscretionaryAcl As Object
 
                tempDiscretionaryAcl = tempSecurityDescriptor.DiscretionaryAcl
                For Each tempAccessControlEntry As AccessControlEntry In _
                  tempDiscretionaryAcl
                    If tempAccessControlEntry.Trustee = "PTS\Schüler" OrElse _
                    tempAccessControlEntry.Trustee = "jeder" Then
                        tempDiscretionaryAcl.RemoveAce(tempAccessControlEntry)
                    End If
                Next
                tempSecurityDescriptor.DiscretionaryAcl = tempDiscretionaryAcl
                tempAdsSecurity.SetSecurityDescriptor(tempSecurityDescriptor)
            Catch ex As Exception
                MsgBox(ex.Message & " inherited ace not removed")
            End Try
        End Sub
#End Region
 
    End Class
End Namespace