Using C++, Want to remove (not deny) Write permission alone from a user trustee with Full Control windows NTFS folder permission.

[Windows 11]

I want to implement a c++ program to remove "Write" permission alone for a user trustee with "Full Control" permission over a folder in windows NTFS drive. I tried to use the SetEntriesInAcl() function from the aclapi.h API, but I failed to to because REVOKE_ACCESS AccessMode removing the trustee itself. I want to remove Write access (that is I don't want to set deny or allow access type). Help and suggest me how to achieve it.Note : I also tried the below method which I don't want. Since it is not a correct solution for my need. I used "SET_ACCESS" as grfAccessMode, "GENERIC_READ | GENERIC

Continue reading...