如何在 Windows 8 中设置共享权限

Question

下面的代码在基于 NT 的机器上设置权限时工作正常，但在 Windows 8 上的工作方式有所不同。该代码将在 Windows 8 上创建共享，但不会影响共享属性的“共享权限”页面。

要进入我正在谈论的属性页面，请右键单击共享并选择属性。从那里选择“共享”选项卡，然后选择“高级共享”。从这里单击“权限”按钮。这些组将显示“所有人”，并且在对话框底部会有“完全控制”、“更改”和“读取”权限的选项。这些是我需要以编程方式选择的选项。就像我说的，相同的代码在 Vista/Win 7 中实现了这一点，但在 Windows 8 中却没有。

谁能告诉我如何在 Windows 8 中执行此操作？答案可以是 VB 或 C#，都可以。

Private Function CreateWindowsShare(ByVal DirectoryToShare As String) As String

    Dim ManageClass As New ManagementClass("Win32_Share")
    Dim ReturnStatus As UInt32 = 0
    Dim i As Integer = 1
    Dim CreatedShareName As String

    Do
        CreatedShareName = IIf(i = 1, "TestShare", "TestShare" & i)

        Dim inParams As ManagementBaseObject = ManageClass.GetMethodParameters("Create")
        inParams("Description") = ""
        inParams("Name") = CreatedShareName
        inParams("Path") = DirectoryToShare
        inParams("Type") = &H0

        Dim outParams As ManagementBaseObject = ManageClass.InvokeMethod("Create", inParams, Nothing)

        ReturnStatus = Convert.ToUInt32(outParams.Properties("ReturnValue").Value)

        i += 1
    Loop While ReturnStatus = MethodStatus.DuplicateShare

    If ReturnStatus <> 0 Then
        Throw New Exception("Unable to create share.")
    End If

    ' For more info see:
    'http://social.msdn.microsoft.com/Forums/windowsdesktop/en-US/de213b61-dc7e-4f33-acdb-893aa96837fa/c-set-directory-sharing-permission-full-control-for-everyone-programmatically-in-windows-7-or?forum=windowssdk

    Dim ntAccount As New NTAccount("Everyone")

    Dim UserSID As SecurityIdentifier = ntAccount.Translate(GetType(SecurityIdentifier))
    Dim UtenteSIDArray(UserSID.BinaryLength) As Byte
    UserSID.GetBinaryForm(UtenteSIDArray, 0)

    Dim UserTrustee As New ManagementClass(New ManagementPath("Win32_Trustee"), Nothing)
    UserTrustee("Name") = "Everyone"
    UserTrustee("SID") = UtenteSIDArray

    Dim UserACE As New ManagementClass(New ManagementPath("Win32_Ace"), Nothing)
    UserACE("AccessMask") = 2302127  ' <-Full Access
    UserACE("AceFlags") = AceFlags.ObjectInherit Or AceFlags.ContainerInherit
    UserACE("AceType") = AceType.AccessAllowed
    UserACE("Trustee") = UserTrustee

    Dim UserSecurityDescriptor As New ManagementClass(New ManagementPath("Win32_SecurityDescriptor"), Nothing)
    UserSecurityDescriptor("ControlFlags") = 4 ' SE_DACL_PRESENT
    UserSecurityDescriptor("DACL") = New Object() {UserACE}

    Dim ShareClass As New ManagementClass("Win32_Share")
    Dim Share As New ManagementObject(ShareClass.Path.ToString & ".Name='" & CreatedShareName & "'")

    Share.InvokeMethod("SetShareInfo", New Object() {Int32.MaxValue, "", UserSecurityDescriptor})

    Return CreatedShareName
End Function

Public Enum MethodStatus
    Success = 0     'Success
    AccessDenied = 2    'Access denied
    UnknownFailure = 8  'Unknown failure
    InvalidName = 9     'Invalid name
    InvalidLevel = 10   'Invalid level
    InvalidParameter = 21   'Invalid parameter
    DuplicateShare = 22     'Duplicate share
    RedirectedPath = 23     'Redirected path
    UnknownDevice = 24  'Unknown device or directory
    NetNameNotFound = 25    'Net name not found
End Enum

Answer 1

我发现了问题。

问题是我弄乱了访问标志。

在我的代码中是 2302127

应该是 2032127

0 和 3 出于某种原因被翻转了。