请各位有时间的高手指点下，小弟想限制一个指定文件夹的访问权限。写了这样的一个小例程，但是运行却执行不好，请各位大大指点！

代码如下：
[code delphi]
procedure TForm1.Button1Click(Sender: TObject);
var
SD: SECURITY_DESCRIPTOR;
pUserSID, pGroupSID: Pointer;
szDomain: PChar;
snuType: SID_NAME_USE;
cbSID: DWORD;
cbDomain: DWORD;
begin
if InitializeSecurityDescriptor(@SD, SECURITY_DESCRIPTOR_REVISION) then
ShowMessage('Initialize ok')
else
ShowMessage('Initialize failed');
cbDomain := 80;
cbSID := 1024;
pUserSID := AllocMem(cbSID);
szDomain := AllocMem(cbDomain);
if LookupAccountName(nil, 'administrator', pUserSID, cbSID, szDomain, cbDomain, snuType) then
ShowMessage('LookupAccountName:User ok')
else
ShowMessage('LookupAccountName:User failed');
if SetSecurityDescriptorOwner(@SD, pUserSID, False) then
ShowMessage('SetSecurityOwner:User ok')
else
ShowMessage('SetSecurityOwner:User failed');
cbDomain := 80;
cbSID := 1024;
pGroupSID := AllocMem(cbSID);
szDomain := AllocMem(cbDomain);
if LookupAccountName(nil, 'Administrators', pGroupSID, cbSID, szDomain, cbDomain, snuType) then
ShowMessage('LookupAccountName:Group ok')
else
ShowMessage('LookupAccountName:Group failed');
if SetSecurityDescriptorGroup(@SD, pGroupSID, False) then
ShowMessage('SetSecurityGroup ok')
else
ShowMessage('SetSecurityGroup failed');
// ShowMessage(IntToStr(OWNER_SECURITY_INFORMATION or GROUP_SECURITY_INFORMATION));
if SetFileSecurity('D:\temp2', OWNER_SECURITY_INFORMATION or GROUP_SECURITY_INFORMATION, @SD) then
ShowMessage('SetFileSecurity ok')
else
ShowMessage('SetFileSecurity failed');
end;
[/code]

限制“d:\temp2”的用户访问权限！

谢谢，小弟再次感激不尽！

------
没有做不到，只有想不到！

編輯記錄

這問題應屬Win32API而不是VCL，所以幫你移動到Win32API版，望能得到相關高手回覆。