Hi all,

Currently I am using some legacy scripts for rights delegation and am
developing some new .Net application for presenting those delegated rights.

They works fine alone, but when I try to delegate a ADS_RIGHT_GENERIC_READ
to some objects using vbscript and read it from .Net Framework, which I
suppose it return the ActiveDirectoryRights.GenericRead in the managed
world. However, I am wrong. After some study on the value, I discovered that
their hex value are different,
ADS_RIGHT_GENERIC_READ = 0x80000000
ActiveDirectoryRights.GenericRead = 0x00020094

That's why my .Net application fails to recognize those GENERIC_READ ace
granted in vbscript.

Could anyone please explain how should I match those GENERIC permissions in
the two worlds?

Thanks for your help!

Cheers,
Tony