adTempus API
PreviousUpNext
ISecurityDescriptor::GetAceForSid Method

Gets the ACE for the entity with the specified SID

C++
HRESULT GetAceForSid(VARIANT sid, long flags, [out,retval] IADTAce ** pVal);
C#
GetAceForSid(VARIANT sid, long flags, [out,retval] IADTAce * pVal);
Visual Basic
Sub GetAceForSid(sid As VARIANT, flags As long, pVal As [out,retval] IADTAce *)
Parameters 
Description 
[in] VARIANT sid 
Binary representation of the SID to resolve. This can be obtained from ISecEntity.Sid

The ACE representing the requested user, or null if an error occurs.

This method returns an ACE representing entity with the specified SID. 

If the security descriptor already contains an ACE for that entity, a pointer to that ACE is returned. Otherwise, GetAceForName creates a new ACE (with no permissions), adds it to the descriptor, and returns it. 

If the SID cannot be resolved, the method fails with error ADT_E_NOT_FOUND.

adTempus API Reference version 3.0.0.0, revised 10/30/2008