Export (0) Print
Expand All

IADsSecurityUtility interface

The IADsSecurityUtility interface is used to get, set, or retrieve the security descriptor on a file, fileshare, or registry key. You can also use it to convert the security descriptor to or from raw or hexadecimal mode and you can limit the scope of the security descriptor data retrieved or set by indicating whether you want it for the owner, group, DACL, or SACL.

Members

The IADsSecurityUtility interface inherits from the IDispatch interface. IADsSecurityUtility also has these types of members:

Methods

The IADsSecurityUtility interface has these methods.

MethodDescription
ConvertSecurityDescriptor

Converts a security descriptor from one format to another.

GetSecurityDescriptor

Retrieves a security descriptor for the specified file, fileshare, or registry key.

SetSecurityDescriptor

Sets the security descriptor for the specified file, file share, or registry key.

 

Properties

The IADsSecurityUtility interface has these properties.

PropertyAccess typeDescription

SecurityMask

Read/write

Determines which elements of the security descriptor to retrieve or set.

 

Remarks

To read the system access-control list (SACL) of a file or directory, the SE_SECURITY_NAME privilege must be enabled for the calling process. For more information about retrieving the SACL for an object, see Retrieving an Object's SACL.

For more information and a code example that shows how to use the IADsSecurityUtility interface to add an ACE to a file, see Example Code for Adding an ACE to a File.

Requirements

Minimum supported client

Windows Vista

Minimum supported server

Windows Server 2003

Header

Iads.h

DLL

Activeds.dll

IID

IID_IADsSecurityUtility is defined as A63251B2-5F21-474B-AB52-4A8EFAD10895

See also

ADS_PATHTYPE_ENUM
ADS_SD_FORMAT_ENUM
IADsAccessControlEntry
IAccessControlList
IADsSecurityDescriptor
Security Interfaces
Security Descriptors on Files and Registry Keys
Example Code for Adding an ACE to a File

 

 

Show:
© 2014 Microsoft