Составление дескриптора безопасности

// Init process security.
HRESULT initComSecurity()
{
    // Local vars.
    HRESULT  hr = NOERROR;
    DWORD    dwErr;
    BOOL     fRet;
    SECURITY_DESCRIPTOR SecurityDesc = {0};
    EXPLICIT_ACCESS     ea = {0};
    PACL     pAcl         = NULL;
    PSID     pSidAdmins   = NULL;
    PSID     pSidAuthUser = NULL;
    DWORD    dwSidAdminsSize=SECURITY_MAX_SID_SIZE;
    DWORD    dwSidAuthUserSize=SECURITY_MAX_SID_SIZE;
 
    // Try block.Begin.
    try
    {
        // Initialize the security descriptor.
        fRet = InitializeSecurityDescriptor( &SecurityDesc, SECURITY_DESCRIPTOR_REVISION );
        if ( !fRet )
        {
            dwErr = GetLastError();
            hr = HRESULT_FROM_WIN32( dwErr );
            throw QString("Can't initialize security descriptor. Errcode: %1").arg(dwErr);
        }
 
        // Allocate enough memory for the 'pSidAdmins'.
        if ( ! ( pSidAdmins = LocalAlloc ( LMEM_FIXED, SECURITY_MAX_SID_SIZE ) ) )
            throw QString("Could not allocate memory for 'pSidAdmins'.");
        // Allocate enough memory for the 'pSidAuthUser'.
        if ( ! ( pSidAuthUser = LocalAlloc ( LMEM_FIXED, SECURITY_MAX_SID_SIZE ) ) )
            throw QString("Could not allocate memory for 'pSidAuthUser'.");
 
        // Create SID for Administrators.
        hr = CreateWellKnownSid( WinBuiltinAdministratorsSid, NULL, &pSidAdmins, &dwSidAdminsSize );
        if ( FAILED( hr ) )
        {
            throw QString("Can't create SID for Administrator");
        }
 
        // Create SID for AuthenticatedUsers.
        hr = CreateWellKnownSid( WinAuthenticatedUserSid, NULL, &pSidAuthUser, &dwSidAuthUserSize );
        if ( FAILED( hr ) )
        {
            throw QString("Can't Create SID for AuthenticatedUsers.");
        }
 
        // Set the security descriptor owner to Administrators.
        fRet = SetSecurityDescriptorOwner( &SecurityDesc, pSidAdmins, FALSE);
        if ( !fRet )
        {
            dwErr = GetLastError();
            hr = HRESULT_FROM_WIN32( dwErr );
            throw QString("Can't set the security descriptor owner to Administrators. Errcode: %1").arg(dwErr);
        }
 
        // Set the security descriptor group to Administrators.
        fRet = SetSecurityDescriptorGroup( &SecurityDesc, pSidAdmins, FALSE);
        if ( !fRet )
        {
            dwErr = GetLastError();
            hr = HRESULT_FROM_WIN32( dwErr );
            throw QString("Can't set the security descriptor group to Administrators. Errcode: %1").arg(dwErr);
        }
 
        // **Initialize 'pAcl'.Begin.*************************************
        // First need to allocate space, than init 'pAcl'.
        DWORD cbAcl = sizeof(ACL) + sizeof(ACCESS_ALLOWED_ACE);
        cbAcl += dwSidAdminsSize - sizeof(DWORD);
        cbAcl += dwSidAuthUserSize - sizeof(DWORD);
 
        // Align cbAcl to a DWORD.
        cbAcl = (cbAcl + (sizeof(DWORD) - 1)) & 0xfffffffc;
 
        // Allocate memory.
        pAcl = (ACL*)LocalAlloc(LPTR, cbAcl);
        if(!pAcl)
            throw QString("Can't allocate meory for PACL item");
 
        // Init PACL.
        if( ! InitializeAcl(pAcl, cbAcl, ACL_REVISION) )
            throw QString("Can't init PACL item.");
        // **Initialize 'pAcl'.End.***************************************
 
        // Setup AuthenticatedUsers for COM access.
        ea.grfAccessPermissions = COM_RIGHTS_EXECUTE;
        ea.grfAccessMode = SET_ACCESS;
        ea.grfInheritance = NO_INHERITANCE;
        ea.Trustee.pMultipleTrustee = NULL;
        ea.Trustee.MultipleTrusteeOperation = NO_MULTIPLE_TRUSTEE;
        ea.Trustee.TrusteeForm = TRUSTEE_IS_SID;
        ea.Trustee.TrusteeType = TRUSTEE_IS_GROUP;
        ea.Trustee.ptstrName = (LPWSTR)pSidAuthUser;
 
 
        // Create new ACL with this ACE.
        dwErr = SetEntriesInAcl( 1, &ea, NULL, &pAcl );   // Эта строка вызывает крах!
        if ( dwErr != ERROR_SUCCESS )
        {
            hr = HRESULT_FROM_WIN32( dwErr );
            throw QString("Can't create new ACL with this ACE. Errcode: %1").arg(dwErr);
        }
 
        // Set the ACL to the security descriptor.
        fRet = SetSecurityDescriptorDacl( &SecurityDesc, TRUE, pAcl, FALSE );
        if ( !fRet )
        {
            dwErr = GetLastError();
            hr = HRESULT_FROM_WIN32( dwErr );
            throw QString("Can't set the ACL to the security descriptor. Errcode: %1").arg(dwErr);
        }
 
        // Try to init com security.
        hr = CoInitializeSecurity(
            &SecurityDesc,
            -1,
            NULL,
            NULL,
            RPC_C_AUTHN_LEVEL_PKT_PRIVACY,
            RPC_C_IMP_LEVEL_IMPERSONATE,
            NULL,
            EOAC_DYNAMIC_CLOAKING | EOAC_DISABLE_AAA | EOAC_NO_CUSTOM_MARSHAL,
            NULL );
    }
    // Try block.End.
 
    // Route errors.
    catch(QString &strErr)
    {
        // Just display it.
        qWarning() << "initComSecurity - error:" << strErr << ". Errcode:" << hex << hr;
    }
 
    // Cleanups.
    if ( pSidAdmins != NULL )
    {
        LocalFree( pSidAdmins );
        pSidAdmins = NULL;
    }
    if ( pSidAuthUser != NULL )
    {
        LocalFree( pSidAuthUser );
        pSidAuthUser = NULL;
    }
    if ( pAcl != NULL )
    {
        LocalFree( pAcl );
        pAcl = NULL;
    }
 
    // Return result.
    return (hr);
}

// Create SID for Administrators.
hr = CreateWellKnownSid( WinBuiltinAdministratorsSid, NULL, &pSidAdmins, &dwSidAdminsSize );

    return CoInitializeSecurity (
        pSecurityDescriptor,
        -1,
        NULL,
        NULL,
        RPC_C_AUTHN_LEVEL_PKT_PRIVACY,
        RPC_C_IMP_LEVEL_IMPERSONATE,
        NULL,
        EOAC_DYNAMIC_CLOAKING | EOAC_DISABLE_AAA | EOAC_NO_CUSTOM_MARSHAL,
        NULL );

    // For this, you first get a pointer to the VDS Loader
    // Launch the VDS service.
    //
 
    hResult = CoCreateInstance (
                CLSID_VdsLoader,
                NULL,
                CLSCTX_LOCAL_SERVER,
                IID_IVdsServiceLoader,
                (void **) &pLoader );