列出可以访问 VB.Net 中的文件或目录的 AD 组

Imports System.DirectoryServices.AccountManagement

Public Sub ListADGroupsForFileOrDirectory(filePath As String)
    Dim fileSecurity As System.Security.AccessControl.FileSecurity = System.IO.File.GetAccessControl(filePath)
    Dim authorizationRules As AuthorizationRuleCollection = fileSecurity.GetAccessRules(True, True, GetType(System.Security.Principal.SecurityIdentifier))

    For Each rule As FileSystemAccessRule In authorizationRules
        If TypeOf rule.IdentityReference Is SecurityIdentifier Then
            Dim sid As SecurityIdentifier = DirectCast(rule.IdentityReference, SecurityIdentifier)
            Dim principalContext As New PrincipalContext(ContextType.Domain)
            Dim userPrincipal As UserPrincipal = UserPrincipal.FindByIdentity(principalContext, IdentityType.Sid, sid.Value)

            If userPrincipal IsNot Nothing Then
                Dim groups As PrincipalSearchResult(Of Principal) = userPrincipal.GetAuthorizationGroups()
                For Each group As Principal In groups
                    Console.WriteLine("AD Group: " & group.Name)
                    ' 可以在这里添加对应的腾讯云产品和链接
                Next
            End If
        End If
    Next
End Sub