>Also I think it's better to do a little bit more and forward them to
>ntdll Rtl* calls, like some existing calls already do, it's safe to
>assume prototype are the same between the two.

Hi Nicolai, RtlAddAuditAccessObjectAce and other are still not implemented in ntdll (and ntdll.spec)

Am i right that you suggest to write the stubs for Rtl* in ntdll, and then forward advapi32 calls to
Rtl* functions? 

Regards

 Louis