This topic has not yet been rated - Rate this topic

LsaSetInformationPolicy function

Applies to: desktop apps only

The LsaSetInformationPolicy function modifies information in a Policy object.

Syntax

NTSTATUS LsaSetInformationPolicy(
  __in  LSA_HANDLE PolicyHandle,
  __in  POLICY_INFORMATION_CLASS InformationClass,
  __in  PVOID Buffer
);

Parameters

PolicyHandle [in]

A handle to a Policy object. The required access rights for this handle depend on the value of the InformationClass parameter. For more information, see Opening a Policy Object Handle.

InformationClass [in]

Specifies one of the following values from the POLICY_INFORMATION_CLASS enumeration type. The value indicates the type of information to set.

ValueMeaning
PolicyAuditEventsInformation

Sets the system's auditing rules. The handle passed in the PolicyHandle parameter must have the POLICY_SET_AUDIT_REQUIREMENTS access right. The Buffer parameter must be a pointer to a POLICY_AUDIT_EVENTS_INFO structure.

PolicyPrimaryDomainInformation

Sets the name and SID of the system's primary domain. The handle passed in the PolicyHandle parameter must have the POLICY_TRUST_ADMIN access right. The Buffer parameter must be a pointer to a POLICY_PRIMARY_DOMAIN_INFO structure.

PolicyAccountDomainInformation

Sets the name and SID of the system's account domain. The handle passed in the PolicyHandle parameter must have the POLICY_TRUST_ADMIN access right. The Buffer parameter must be a pointer to a POLICY_ACCOUNT_DOMAIN_INFO structure.

PolicyDnsDomainInformation

Sets Domain Name System (DNS) information about the primary domain associated with the Policy object. The handle passed in the PolicyHandle parameter must have the POLICY_TRUST_ADMIN access right. The Buffer parameter must be a pointer to a POLICY_DNS_DOMAIN_INFO structure.

PolicyLsaServerRoleInformation

Sets the role of an LSA server. The handle passed in the PolicyHandle parameter must have the POLICY_SERVER_ADMIN access right. The Buffer parameter must be a pointer to a POLICY_LSA_SERVER_ROLE_INFO structure.

Changing a server's role from primary to backup has no effect (although the function returns STATUS_SUCCESS). Changing a server's role from backup to primary requires extensive network operations and may be slow.

 

Buffer [in]

Pointer to a structure containing the information to set. The type of structure depends on the value of the InformationClass parameter.

Return value

If the function succeeds, the return value is STATUS_SUCCESS.

If the function fails, the return value is an NTSTATUS code. For more information, see LSA Policy Function Return Values.

You can use the LsaNtStatusToWinError function to convert the NTSTATUS code to a Windows error code.

Requirements

Minimum supported client

Windows 2000 Professional

Minimum supported server

Windows 2000 Server

Header

Ntsecapi.h

Library

Advapi32.lib

DLL

Advapi32.dll

See also

POLICY_ACCOUNT_DOMAIN_INFO
POLICY_AUDIT_EVENTS_INFO
POLICY_DNS_DOMAIN_INFO
POLICY_LSA_SERVER_ROLE_INFO
POLICY_PRIMARY_DOMAIN_INFO

 

 

Send comments about this topic to Microsoft

Build date: 3/13/2012

Did you find this helpful?
(1500 characters remaining)
Community Content Add
Annotations FAQ