GetEffectiveRightsFromAcl has problems with Language Packs and Universal Groups
When you are using the GetEffectiveRightsFromAcl API in your application you may encounter multiple problems:
- If users are members of various universal groups across multiple domains the results of the call may be incorrect, or the call may take a long time and result in high processor utilization. You may also notice substantial network traffic.
- If the computers executing the application are using Multilingual User Interface (MUI) (on Windows XP or Windows Server 2003), or have language packs installed (on Windows Vista and newer versions of Windows), and the user language differs from the system language, calls to the API may fail with return code 1355 which equates to error “The specified domain either does not exist or could not be contacted.”
For more information on this issue, including potential causes, workarounds, and resolutions, see: Microsoft KB Article KB2018746.