1 out of 1 rated this helpful - Rate this topic

ADS_ACETYPE_ENUM enumeration

The ADS_ACETYPE_ENUM enumeration is used to specify the type of an access-control entry for Active Directory objects. The IADsAccessControlEntry.AceType property contains one of these values for an Active Directory object.

For more information and possible values for file, file share and registry objects, see the AceType member of the ACE_HEADER structure.

Syntax

C++


typedef enum  { 
  ADS_ACETYPE_ACCESS_ALLOWED                  = 0,
  ADS_ACETYPE_ACCESS_DENIED                   = 0x1,
  ADS_ACETYPE_SYSTEM_AUDIT                    = 0x2,
  ADS_ACETYPE_ACCESS_ALLOWED_OBJECT           = 0x5,
  ADS_ACETYPE_ACCESS_DENIED_OBJECT            = 0x6,
  ADS_ACETYPE_SYSTEM_AUDIT_OBJECT             = 0x7,
  ADS_ACETYPE_SYSTEM_ALARM_OBJECT             = 0x8,
  ADS_ACETYPE_ACCESS_ALLOWED_CALLBACK         = 0x9,
  ADS_ACETYPE_ACCESS_DENIED_CALLBACK          = 0xA,
  ADS_ACETYPE_ACCESS_ALLOWED_CALLBACK_OBJECT  = 0xB,
  ADS_ACETYPE_ACCESS_DENIED_CALLBACK_OBJECT   = 0xC,
  ADS_ACETYPE_SYSTEM_AUDIT_CALLBACK           = 0xD,
  ADS_ACETYPE_SYSTEM_ALARM_CALLBACK           = 0xE,
  ADS_ACETYPE_SYSTEM_AUDIT_CALLBACK_OBJECT    = 0xF,
  ADS_ACETYPE_SYSTEM_ALARM_CALLBACK_OBJECT    = 0x10
} ADS_ACETYPE_ENUM;

Constants

ADS_ACETYPE_ACCESS_ALLOWED: The ACE is of the standard ACCESS ALLOWED type, where the ObjectType and InheritedObjectType fields are NULL.
ADS_ACETYPE_ACCESS_DENIED: The ACE is of the standard system-audit type, where the ObjectType and InheritedObjectType fields are NULL.
ADS_ACETYPE_SYSTEM_AUDIT: The ACE is of the standard system type, where the ObjectType and InheritedObjectType fields are NULL.
ADS_ACETYPE_ACCESS_ALLOWED_OBJECT: The ACE grants access to an object or a subobject of the object, such as a property set or property. ObjectType or InheritedObjectType or both contain a GUID that identifies a property set, property, extended right, or type of child object.

Windows NT 4.0: Not used.
ADS_ACETYPE_ACCESS_DENIED_OBJECT: The ACE denies access to an object or a subobject of the object, such as a property set or property. ObjectType or InheritedObjectType or both contain a GUID that identifies a property set, property, extended right, or type of child object.

Windows NT 4.0: Not used.
ADS_ACETYPE_SYSTEM_AUDIT_OBJECT: The ACE audits access to an object or a subobject of the object, such as a property set or property. ObjectType or InheritedObjectType or both contain a GUID that identifies a property set, property, extended right, or type of child object.

Windows NT 4.0: Not used.
ADS_ACETYPE_SYSTEM_ALARM_OBJECT: Not used.
ADS_ACETYPE_ACCESS_ALLOWED_CALLBACK: Same functionality as ADS_ACETYPE_ACCESS_ALLOWED, but used with applications that use Authz to verify ACEs.

Windows NT 4.0: Not used.
ADS_ACETYPE_ACCESS_DENIED_CALLBACK: Same functionality as ADS_ACETYPE_ACCESS_DENIED, but used with applications that use Authz to verify ACEs.

Windows NT 4.0: Not used.
ADS_ACETYPE_ACCESS_ALLOWED_CALLBACK_OBJECT: Same functionality as ADS_ACETYPE_ACCESS_ALLOWED_OBJECT, but used with applications that use Authz to verify ACEs.

Windows NT 4.0: Not used.
ADS_ACETYPE_ACCESS_DENIED_CALLBACK_OBJECT: Same functionality as ADS_ACETYPE_ACCESS_DENIED_OBJECT, but used with applications that use Authz to check ACEs.

Windows NT 4.0: Not used.
ADS_ACETYPE_SYSTEM_AUDIT_CALLBACK: Same functionality as ADS_ACETYPE_SYSTEM_AUDIT, but used with applications that use Authz to check ACEs.

Windows NT 4.0: Not used.
ADS_ACETYPE_SYSTEM_ALARM_CALLBACK: Not used.
ADS_ACETYPE_SYSTEM_AUDIT_CALLBACK_OBJECT: Same functionality as ADS_ACETYPE_SYSTEM_AUDIT_OBJECT, but used with applications that use Authz to verify ACEs.

Windows NT 4.0: Not used.
ADS_ACETYPE_SYSTEM_ALARM_CALLBACK_OBJECT: Not used.

Remarks

A standard ACE is one defined and used in a Windows 2000 or Windows NT security descriptor. Windows 2000 enables the ACE to be applied to objects and properties identified by GUIDs.

Use the IADsAccessControlEntry property method to determine the ACE type.

Note Because Visual Basic Scripting Edition (VBScript) cannot read data from a type library, VBScript applications cannot recognize symbolic constants as defined above. Use the numeric constants instead to set the appropriate flags in VBScript applications. To use the symbolic constants as a good programming practice, write explicit declarations of such constants, as done here, in VBScript applications.

Requirements

Minimum supported client	Windows 2000 Professional [desktop apps only]
Minimum supported server	Windows 2000 Server [desktop apps only]
Header	Iads.h

Community Additions