Saby's space

//Creating the share folder and add a user with permission to a share folder

System.Management.ManagementScope scope = new System.Management.ManagementScope(@"\\" + MachineName + @"\root\cimv2");

scope.Connect();

LogInfo("Creating fileShare..");

ManagementClass managementClass = new ManagementClass(scope, new ManagementPath("Win32_Share"), null);

ManagementBaseObject inParams = managementClass.GetMethodParameters("Create");

inParams["Description"] = shareName;

inParams["Name"] = shareName;

inParams["Path"] = sharePath;

inParams["Type"] = 0x0;

inParams["Access"] = SecurityDescriptor;  // This is where we add the user with permission. I have shown 2 ways of creating this object below 

inParams = managementClass.InvokeMethod("Create", inParams, null);

//  Getting SecurityDescriptor from the share itself.

System.Management.ManagementScope scope = new System.Management.ManagementScope(@"\\" + MachineName + @"\root\cimv2");

scope.Connect();

ManagementObject Win32LogicalSecuritySetting = new ManagementObject(string.Format "{0}:Win32_LogicalShareSecuritySetting.Name='{1}'", scopeString,shareName));

ManagementBaseObject Return = Win32LogicalSecuritySetting.InvokeMethod("GetSecurityDescriptor", null, null);

Int32 ReturnValue = Convert.ToInt32(Return.Properties["ReturnValue"].Value);

if (ReturnValue != 0)

    throw new Exception(String.Format("Error when calling GetSecurityDescriptor. Error code : {0}.", ReturnValue));

SecurityDescriptor = Return.Properties["Descriptor"].Value as ManagementBaseObject;

// Creating a new securty description for a new user

ManagementObject Trustee = new ManagementClass(new ManagementPath("Win32_Trustee"), null);

Trustee["Domain"] = domainName;

Trustee["Name"] = userName;

ManagementObject AdminACE = new ManagementClass(new ManagementPath("Win32_Ace"), null);

AdminACE["AccessMask"] = 2032127;

AdminACE["AceFlags"] = 3;

AdminACE["AceType"] = 0;

AdminACE["Trustee"] = Trustee;

ManagementObject SecurityDescriptor= new ManagementClass(new ManagementPath("Win32_SecurityDescriptor"), null);

SecurityDescriptor ["ControlFlags"] = 4; //SE_DACL_PRESENT

SecurityDescriptor ["DACL"] = new object[] { AdminACE };