You had me at "Hello World"

Wow! I can't tell you how grateful I am to have found your How-To. I've been banging my head against the wall on this all morning and the docs have been of little help. I did follow the link and create an enum for AccessMask, but none of the listed values are 2032127. Is this the sum of several values?

I sure wish we could improve those docs.

One last question, this works for individual users but does not seem to work for groups. Does anything need to be different to configure group permissions?

Thanks.

Hi

I have been able to CHANGE the EVERYONE to any user or group that I want but I am not being able to ADD another user/group to my share list.

example: Administrators Full controll and domainname\user full control. (not talking NTFS) just shares permissions.

I wonder if you could help me out.

Hi Thanks

It worked. At last! I should have thought of it.

Hey, if i have to give multiple users permission to the share.How should this be done

Great post!

I keep getting error in this line:

ManagementObject share = new ManagementObject(@"\\MyRemoteServer\root\cimv2:Win32_Share.Name='TestShare'");

If not my share name TestShare is equals to the shared folder name.

Any ideas how to solve this problem ?

Best Regards subtile

Hi!

Thanks for the post, this is really helpful.  However, I'm having some trouble in the following scenario:

In a home network, user A and B are in the same workgroup, but on different machine.  A wants to allow user B (on a different machine) to share a folder residing on user A's machine.

Is there a way to do this?  Both machines run windows XP, with only workgroups, no domains.

--kim

Hi

Could you tell me how to share a folder to everyone instead of a specific user?

Thanks!

@HelloWorld

Thanks for the reply. This works on my Vista machine, but it doesn't work on Windows Server 2003. Any thoughts? Here is what I have for code.

protected void CreateShare(string path, string shareName)
{
   // Create a ManagementClass object
   ManagementClass managementClass = new ManagementClass("Win32_Share");
   // Create ManagementBaseObjects for in and out parameters
   ManagementBaseObject inParams = managementClass.GetMethodParameters("Create");
   ManagementBaseObject outParams;
   // Set the input parameters
   inParams["Description"] = "IdeaServer";
   inParams["Name"] = shareName;
   inParams["Path"] = path;
   inParams["Type"] = 0x0; // Disk Drive
   //Another Type:
   //        DISK_DRIVE = 0x0
   //        PRINT_QUEUE = 0x1
   //        DEVICE = 0x2
   //        IPC = 0x3
   //        DISK_DRIVE_ADMIN = 0x80000000
   //        PRINT_QUEUE_ADMIN = 0x80000001
   //        DEVICE_ADMIN = 0x80000002
   //        IPC_ADMIN = 0x8000003
   //inParams["MaximumAllowed"] = int maxConnectionsNum;
   // Invoke the method on the ManagementClass object
   inParams["Access"] = SecurityDescriptor();
   outParams = managementClass.InvokeMethod("Create", inParams, null);
   // Check to see if the method invocation was successful
   uint rVal = (uint)(outParams.Properties["ReturnValue"].Value);
   if (rVal != 0 && rVal != 22) // ok if it already exists
   {
       throw new Exception("Unable to share directory.");
   }
}

private static ManagementBaseObject SecurityDescriptor()
{
   NTAccount account = new NTAccount("NT Authority", "Everyone");
   SecurityIdentifier sid = (SecurityIdentifier)account.Translate(typeof(SecurityIdentifier));
   byte[] sidArray = new byte[sid.BinaryLength];
   sid.GetBinaryForm(sidArray, 0); 
   ManagementObject Trustee = new ManagementClass(new ManagementPath("Win32_Trustee"), null);
   Trustee["Domain"] = "NT Authority";
   Trustee["Name"] = "Everyone";
   Trustee["SID"] = sidArray;
   ManagementObject AdminACE = new ManagementClass(new ManagementPath("Win32_Ace"), null);
   AdminACE["AccessMask"] = 2032127;
   AdminACE["AceFlags"] = 3;
   AdminACE["AceType"] = 0;
   AdminACE["Trustee"] = Trustee;
   ManagementObject SecurityDescriptor = new ManagementClass(new ManagementPath("Win32_SecurityDescriptor"), null);
   SecurityDescriptor["ControlFlags"] = 4; //SE_DACL_PRESENT
   SecurityDescriptor["DACL"] = new object[] { AdminACE };
   return SecurityDescriptor;
}

Thanks a lot!

David

@HelloWorld

Thanks! That worked perfectly!