Hi there again,

The documentation in msdn says:

QUOTE
To read the owner, group, or DACL from the security descriptor for the specified file or directory, the DACL for the file or directory must grant READ_CONTROL access to the caller, or the caller must be the owner of the file or directory.
UNQUOTE

When we tested the program using a restricted user account, the function returned a zero. Now, when the getfilesecuity returns a zero does this automatically mean that the user has restrictions?

Regards,