Long ago (July 2006) I posted an article entitled Creating Security Descriptors for SPS 2003 Managed Protocol Handlers which was supplemental to my original version of the SPS 2003 Managed Protocol explaining how to build a Win32 security descriptor using