[ILM/FIM] nTSecurityDescriptor を同期対象にして、アクセス権制御を実装にチャレンジする

    Public Sub MapAttributesForExport(ByVal FlowRuleName As String, _
    ByVal mventry As MVEntry, ByVal csentry As CSEntry) _
    Implements IMASynchronization.MapAttributesForExport
        ' TODO: Add export attribute flow code here
        Select Case FlowRuleName
            Case "nTSecurityDescriptor"
                Dim trustees() As String = {"JPDSFIM1\fimservice"}
                Dim sd As IADsSecurityDescriptor
                Dim acl As IADsAccessControlList
                Dim ace As IADsAccessControlEntry
                Dim su As IADsSecurityUtility
                Dim bsd() As Byte
                su = New ADsSecurityUtility()
                sd = CType(su.ConvertSecurityDescriptor _
                      (csentry("nTSecurityDescriptor").BinaryValue, 2, 1), _
                       SecurityDescriptor)
                bsd = CType(su.ConvertSecurityDescriptor(sd, 1, 2), Byte())
                acl = CType(sd.DiscretionaryAcl, AccessControlList)

                ace = New AccessControlEntry()
                Dim trustee As String
                For Each trustee In trustees
                    ace.AccessMask = 983551
                    ace.AceFlags = 0
                    ace.AceType = 0
                    ace.ObjectType = 0
                    ace.Trustee = trustee
                    acl.AddAce(ace)
                Next
                csentry("nTSecurityDescriptor").BinaryValue = _
                CType(su.ConvertSecurityDescriptor(sd, 1, 2), Byte())

            Case Else
                ' TODO: remove the following statement and add your default script here
                Throw New EntryPointNotImplementedException()

        End Select

    End Sub