Hi,
While performing an in-house testing I tried to set SACL and DACL together on Windows 2012 server . But receiving an error "STATUS_INVALID_PARAMETER". Please see the scenarios that I have tried and which passed and which failed.
Case1: Setting only DACL
In the create request, the flag WRITE_DAC has been set. The following is the set info request capture.
Set info works successfully.
Case2: Setting only SACL
In the create request, the flag ACCESS_SYSTEM_SECURITY has been set. The following is the set info request capture.
Set info works successfully.
Continued in 2nd post
Post 2:- http://social.technet.microsoft.com/Forums/windowsserver/en-US/e353cbff-8e5b-4e42-a623-6002a09e98cf/sacl-and-dacl-is-not-woking-together-while-trying-to-set-acl-on-an-objectcontinued-post-2?forum=winserverfiles
Post 3:- http://social.technet.microsoft.com/Forums/windowsserver/en-US/6d6a9e2b-dd9f-45ed-93c8-a830607afd55/sacl-and-dacl-is-not-woking-together-while-trying-to-set-acl-on-an-objectcontinued-post-3?forum=winserverfiles