I'm trying to extract and restore a Security Descriptor of a NTFS file, via Windows API - XP SP3, I'm trying to understand which functions are actually able to do it properly, but I simply fail.

I found this Remark over MSDN: http://msdn.microsoft.com/en-us/library/aa379573%28VS.85%29.aspx

"Some SECURITY_INFORMATION members work only with the SetNamedSecurityInfo function. These members are not returned in the structure returned by other security functions such as GetNamedSecurityInfo..."

"Some members..." Which members? Why?

"Other Security functions such as..." Which functions? Why?

Anybody have any experience with extracting and restoring a security descriptor of a NTFS file?

Thanks in advance, Doori Bar