在 Exchange 邮箱上设置 ACL

Question

我正在尝试将组添加到邮箱（在 C# 中）。我混合使用了 CDOEXM、DirectoryServices.AccountManagement 调用，但失败了。这是我的代码：

// userDe is a DirectoryEntry
IExchangeMailbox exMb = (IExchangeMailbox)userDe.NativeObject;
IADsSecurityDescriptor securityDescriptor = (IADsSecurityDescriptor)exMb.MailboxRights;
IADsAccessControlList acl = (IADsAccessControlList)securityDescriptor.DiscretionaryAcl;
AccessControlEntry ace = new AccessControlEntry();

// groupName - I have successfully created the group earlier
ace.Trustee = groupName;
acl.AddAce(ace);
securityDescriptor.DiscretionaryAcl = acl;
exMb.MailboxRights = securityDescriptor;

// How do I save it?
exMb.CommitChanges() etc etc
...or userDe.Properties["ntSecurityDescriptor"] = securityDescriptor;

不确定下一步要做什么，我尝试的所有操作都会导致编译错误或 InvalidCastException。

请帮忙

Answer 1

经过相当多的痛苦之后才得到它（我设置的整数值在某种程度上对应于 API 中的枚举值，但我无法让它们工作）。变量 userDe 是一个 DirectoryEntry。

            IExchangeMailbox exMb = (IExchangeMailbox)userDe.NativeObject;
            IADsSecurityDescriptor securityDescriptor = (IADsSecurityDescriptor)exMb.MailboxRights;
            IADsAccessControlList acl = (IADsAccessControlList)securityDescriptor.DiscretionaryAcl;
            AccessControlEntry ace = new AccessControlEntry();
            ace.Trustee = groupName;
            ace.AccessMask = 1;
            ace.AceFlags = 2;
            ace.AceType = 0;

            acl.AddAce(ace);
            securityDescriptor.DiscretionaryAcl = acl;
            IADsUser iadsUser = (IADsUser)userDe.NativeObject;
            iadsUser.Put("msExchMailboxSecurityDescriptor", securityDescriptor);

            iadsUser.SetInfo();