How to read ACLs in AD with dotnet managed C# ?

[Christian from France]

I want to do the folllowing in C# :
I have a DirectoryEntry :
DirectoryEntry usr = new DirectoryEntry("LDAP://cn=Mike,ou=Users,dc=MyDc");

With "AD Users & Computers" Security tab an administrator had give to some
users the right to write the accountExpires property of this Account.
I want to read the ACLs on this object and obtain the list on the users who
have this right.
How can i do ?

Thanks


Christian

 

[Joe Kaplan]

Use the ObjectSecurity property to access the security descriptor as a .NET
managed type.

Joe K.