Win2k ACL Problem

It's surprising how hard ACL questions seem to be. After a search for "ACL" on this site, I found that very few of the posts were answered, and the one's that were were usually very vague.

My problem is this: I have a spider that crawls my network looking for shares. When it finds a share, it is supposed to look at that share's ACL to determine if "everyone" has access. This is bad, so I then send an email to the admin, notifying him of the problem. Everything is in place, except for the fact that I can't access ACL info for the shares. I've seen posts that suggest using WMI & system.management, and I've seen posts that suggest using system.directoryservices. What I haven't seen is a good answer with a code example.

I would really appreciate it if someone could offer some insight on my problem. Code that takes a share's address and outputs the ACL to the console would be ideal. Also, does anyone know of a good web referrence for getting started with system.management classes?

Thanks ahead of time to anyone brave enough to respond :)