FunctionGenerateSDDL(AccountName,AccessFlag,AccessType,AccessMask)DimAccounts,ObjWMI,ObjSID,ObjTru,ObjACEConstSET_DACL_PRESENT=&H8004SetObjWMI=GetObject("winmgmts:"&"{impersonationLevel=impersonate,(Security)}!\\.\root\cimv2")SetAccounts=ObjWMI.ExecQuery("select*FROMWin32_AccountWHEREName='"&AccountName&"'")ForEachAccountInAccountsStrSID=Account.SIDNextSetObjSID=ObjWMI.Get("Win32_SID.SID='"&StrSID&"'")SetObjTru=ObjWMI.Get("Win32_Trustee").SpawnInstance_()ObjTru.Domain=ObjSID.ReferencedDomainNameObjTru.Name=ObjSID.AccountNameObjTru.SID=ObjSID.BinaryRepresentationObjTru.SidLength=ObjSID.SidLengthObjTru.SIDString=ObjSID.SidSetObjACE=ObjWMI.Get("Win32_ACE").SpawnInstance_()ObjACE.Trustee=ObjTruObjACE.AceType=AccessTypeObjACE.AccessMask=AccessMaskObjACE.AceFlags=AccessFlagSetGenerateSDDL=ObjWMI.Get("Win32_SecurityDescriptor").SpawnInstance_()GenerateSDDL.Owner=ObjTruGenerateSDDL.DACL=Array(ObjACE)GenerateSDDL.ControlFlags=SET_DACL_PRESENTEndFunction

例子:

strPath="d:\\1.txt"SetObjWMI=GetObject("winmgmts:"&"{impersonationLevel=impersonate,(Security)}!\\.\root\cimv2")SetObjSec=ObjWMI.Get("Win32_LogicalFileSecuritySetting.Path='"&strPath&"'")ObjSec.SetSecurityDescriptor(GenerateSDDL("everyone",&H0,&H1,&H100E0))