Export (0) Print
Expand All
0 out of 1 rated this helpful - Rate this topic

Privilege Constants

The strPrivilege parameter of the SWbemPrivilegeSet.AddAsString method and the iPrivilege parameter for SWbemPrivilegeSet.Add require privilege strings from WbemPrivilegeEnum. For more information about how to use privilege constants, see Executing Privileged Operations.

The following constants are defined in WbemPrivilegeEnum. The following list includes the equivalent constants for C++ and strings for scripting. To form the scripting short name, remove the "Se" and "Privilege" from the C++ constant name.

The following VBScript code example shows how to enable the RemoteShutdown privilege in a script.

Set Service = GetObject( _
    "winmgmts:{impersonationLevel=impersonate, (RemoteShutdown)}")

Many WMI methods require that one or more permission be enabled. If an account has not been granted a privilege, it cannot be enabled for the method call.

Wbemdisp.tlb ConstantDescription
wbemPrivilegeCreateToken
1 (0x1)

C++ constant: SE_CREATE_TOKEN_NAME string: SeCreateTokenPrivilege

Scripting short name: CreateToken

Required to create a primary token object.

wbemPrivilegePrimaryToken
2 (0x2)

C++ constant: SeAssignPrimaryTokenPrivilege string: SeAssignPrimaryTokenPrivilege

Scripting short name: AssignPrimaryToken

Required to replace a process-level token.

wbemPrivilegeLockMemory
3 (0x3)

C++ constant: SE_LOCK_MEMORY_NAME string: SeLockMemoryPrivilege

Required to lock pages in memory.

wbemPrivilegeIncreaseQuota
4 (0x4)

C++ constant: SE_INCREASE_QUOTA_NAME string: SeIncreaseQuotaPrivilege

Scripting short name: IncreaseQuotaPrivilege

Required to adjust memory quotas for a process.

wbemPrivilegeMachineAccount
5 (0x5)

C++ constant: SE_MACINE_ACCOUNT_NAME string: SeMachineAccountPrivilege

Scripting short name: MachineAccount

Required to add workstations to a domain.

wbemPrivilegeTcb
6 (0x6)

C++ constant: SE_TCB_NAME string: SeTcbPrivilege

Scripting short name: Tcb

Required to act as part of the operating system. The holder is part of the trusted computer base.

wbemPrivilegeSecurity
7 (0x7)

C++ constant: SE_SECURITY_NAME string: SeSecurityPrivilege

Scripting short name: Security

Required to manage auditing and the NT security log.

wbemPrivilegeTakeOwnership
8 (0x8)

C++ constant: SE_TAKE_OWNERSHIP_NAME string: SeTakeOwnershipPrivilege

Scripting short name: TakeOwnership

Required to assume ownership of files or other objects without having an Access Control Entry (ACE) in the discretionary access control list (DACL).

wbemPrivilegeLoadDriver
9 (0x9)

C++ constant: SE_LOAD_DRIVER string: SeLoadDriverPrivilege

Scripting short name: LoadDriver

Required to load or unload a device driver.

wbemPrivilegeSystemProfile
10 (0xA)

C++ constant: SE_SYSTEM_PROFILE_NAME string: SeSystemProfilePrivilege

Scripting short name: SystemProfile

Required to gather profile information about system performance.

wbemPrivilegeSystemtime
11 (0xB)

C++ constant: SE_SYSTEMTIME_NAME string: SeSystemtimePrivilege

Scripting short name: Systemtime

Required to change the system time.

wbemPrivilegeProfileSingleProcess
12 (0xC)

C++ constant: SE_PROF_SINGLE_PROCESS_NAME string: SeProfileSingleProcessPrivilege

Scripting short name: ProfileSingleProcess

Required to gather profile information for a single process.

wbemPrivilegeIncreaseBasePriority
13 (0xD)

C++ constant: SE_INC_BASE_PRIORITY_NAME string: SeIncreaseBasePriorityPrivilege

Scripting short name: IncreaseBasePriority

Required to increase scheduling priority.

wbemPrivilegeCreatePagefile
14 (0xE)

C++ constant: SE_CREATE_PAGEFILE_NAME string: SeCreatePagefilePrivilege

Scripting short name: CreatePagefile

Required to create a pagefile.

wbemPrivilegeCreatePermanent
15 (0xF)

C++ constant: SE_CREATE_PERMANENT_NAME string: SeCreatePermanentPrivilege

Scripting short name: CreatePermanent

Required to create permanent shared objects.

wbemPrivilegeBackup
16 (0x10)

C++ constant: SE_BACKUP_NAME string: SeBackupPrivilege

Scripting short name: Backup

Required to backup files and directories, regardless of the ACL specified for the file.

wbemPrivilegeRestore
17 (0x11)

C++ constant: SE_RESTORE_NAME string: SeRestorePrivilege

Scripting short name: Restore

Required to restore files and directories, regardless of the ACL specified for the file.

wbemPrivilegeShutdown
18 (0x12)

C++ constant: SE_SHUTDOWN_NAME string: SeShutdownPrivilege

Scripting short name: Shutdown

Required to shut down the local system.

wbemPrivilegeDebug
19 (0x13)

C++ constant: SE_DEBUG_NAME string: SeDebugPrivilege

Scripting short name: Debug

Required to debug and adjust the memory of a process owned by another account.

wbemPrivilegeAudit
20 (0x14)

C++ constant: SE_AUDIT_NAME string: SeAuditPrivilege

Scripting short name: Audit

Required to generate audit entries in the NT Security log. Only secure servers should have this privilege.

wbemPrivilegeSystemEnvironment
21 (0x15)

C++ constant: SE_SYSTEM_ENVIRONMENT_NAME string: SeSystemEnvironmentPrivilege

Scripting short name: SystemEnvironment

Required to modify the nonvolatile RAM of systems that use this type of memory to store configuration data.

wbemPrivilegeChangeNotify
22 (0x16)

C++ constant: SE_CHANGE_NOTIFY_NAME string: SeChangeNotifyPrivilege

Scripting short name: ChangeNotify

Required to receive notifications of changes to files or directories and bypass traversal access checks. This privilege is enabled by default for all users.

wbemPrivilegeRemoteShutdown
23 (0x17)

C++ constant: SE_REMOTE_SHUTDOWN_NAME string: SeRemoteShutdownPrivilege

Scripting short name: RemoteShutdown

Required to shut down a remote computer.

wbemPrivilegeUndock
24 (0x18)

C++ constant: SE_UNDOCK_NAME string: SeUndockPrivilege

Scripting short name: Undock

Required to remove a laptop from a docking station.

wbemPrivilegeSyncAgent
25 (0x19)

C++ constant: SE_SYNC_AGENT_NAME string: SeSyncAgentPrivilege

Scripting short name: SyncAgent

Required to synchronize directory service data.

wbemPrivilegeEnableDelegation
26 (0x1A)

C++ constant: SE_ENABLE_DELEGATION_NAME string: SeEnableDelegationPrivilege

Scripting short name: EnableDelegation

Required to enable computer and user accounts to be trusted for delegation.

wbemPrivilegeManageVolume
27 (0x1B)

C++ constant: SE_MANAGE_VOLUME_NAME string: SeManageVolumePrivilege

Scripting short name: ManageVolume

Required to perform volume maintenance tasks.

Requirements

Minimum supported client

Windows XP

Minimum supported server

Windows Server 2003

Header

Wbemdisp.h

IDL

Wbemdisp.idl

See also

Scripting API Constants
SWbemSecurity
WbemPrivilegeEnum
Executing Privileged Operations
Executing Privileged Operations Using VBScript

 

 

Did you find this helpful?
(1500 characters remaining)
Thank you for your feedback
Show:
© 2014 Microsoft. All rights reserved.