AmolT

Finally did it Hope I done it correctly, as far there were no errors. Steps I followed: 1) Read the object DACL using _GetObjectDacl 2) Excluded the required DACL which needed to be removed (exactly opposite of what's happening in _MergeDaclToArray) 3) Clear the objects DACL using _ClearObjectDacl 4) Set back the DACL using _SetFileObjectSecurity the UDF is simply awesome, its just hard to find out the way to such new things for naives Isn't it would be great to add a some function to remove permissions as well. Also one more to LookupAccountSid. Amol

Jos, The thing is I am not able to think of a way to try to make it work. Definately if I set $ClearDacl flag in _EditObjectPermissions it will clear everything. One thing I can think of is to get array of Permissions on folder object and remove 'Everyone' group from the array, and to set all the remaining permissions back on object. But still I can't figure out how should I able to do it. Amol

Hi all, Could anyone guide me to direction for a problem, I need to remove Everyone group from folder permissions. How could I achieve this using this UDF ? I used successfully to add a user to folder permissions using _EditObjectPermissions but unable to find a way to remove 'Everyone' group. Thanks, Amol