Hi all,
I'm using ActiveDs.IADsAccessControlEntry to get the dacl for a
mailbox. By this way I get the trustees NT-like formated (<domain>
\<sAMAccountName>.
In the next step I use ActiveDs.NameTranslate and
ActiveDs.ADS_NAME_TYPE_ENUM to get the displayName and canonicalName
for a trustee.
This works fine for any ordinary group or user account, but not for
'WellKnown Security Principals'.
With trustees like 'NT Authority\self' I 'll get an
IdentityNotMappedException.
I know the way to define a new SecurityIdentifier for a
WellKnownSidType to use the NameTranslate method language-independent.
But how can I do the lookup for well known sid's?
Regards
Peter
