Setting Security and Privileges on Objects

Directory access functions can be used to assign a Windows NT domain account to a mailbox object while creating or modifying the object. They can also set the NTSecurityDescriptor, which is a directory attribute on mailbox objects. For example, you can use directory access functions to restrict user access to objects when creating mailboxes or other objects.

MAPI functions do not create or modify Windows NT domain accounts.