SystemAcl.RemoveAudit Method
Definition
Important
Some information relates to prerelease product that may be substantially modified before it’s released. Microsoft makes no warranties, express or implied, with respect to the information provided here.
Removes the specified audit rule from the current SystemAcl object.
Overloads
| RemoveAudit(SecurityIdentifier, ObjectAuditRule) |
Removes the specified audit rule from the current SystemAcl object. |
| RemoveAudit(AuditFlags, SecurityIdentifier, Int32, InheritanceFlags, PropagationFlags) |
Removes the specified audit rule from the current SystemAcl object. |
| RemoveAudit(AuditFlags, SecurityIdentifier, Int32, InheritanceFlags, PropagationFlags, ObjectAceFlags, Guid, Guid) |
Removes the specified audit rule from the current SystemAcl object. Use this method for directory object Access Control Lists (ACLs) when specifying the object type or the inherited object type. |
Remarks
Audit removal is accomplished by using a complex algorithm that might add ACEs in addition to removing them.
RemoveAudit(SecurityIdentifier, ObjectAuditRule)
Removes the specified audit rule from the current SystemAcl object.
public:
bool RemoveAudit(System::Security::Principal::SecurityIdentifier ^ sid, System::Security::AccessControl::ObjectAuditRule ^ rule);public bool RemoveAudit (System.Security.Principal.SecurityIdentifier sid, System.Security.AccessControl.ObjectAuditRule rule);member this.RemoveAudit : System.Security.Principal.SecurityIdentifier * System.Security.AccessControl.ObjectAuditRule -> boolPublic Function RemoveAudit (sid As SecurityIdentifier, rule As ObjectAuditRule) As BooleanParameters
The SecurityIdentifier for which to remove an audit rule.
- rule
- ObjectAuditRule
The ObjectAuditRule for which to remove an audit rule.
Returns
true if this method successfully removes the specified audit rule; otherwise, false.
Remarks
Audit removal is accomplished by using a complex algorithm that might add ACEs in addition to removing them.
Applies to
RemoveAudit(AuditFlags, SecurityIdentifier, Int32, InheritanceFlags, PropagationFlags)
Removes the specified audit rule from the current SystemAcl object.
public:
bool RemoveAudit(System::Security::AccessControl::AuditFlags auditFlags, System::Security::Principal::SecurityIdentifier ^ sid, int accessMask, System::Security::AccessControl::InheritanceFlags inheritanceFlags, System::Security::AccessControl::PropagationFlags propagationFlags);public bool RemoveAudit (System.Security.AccessControl.AuditFlags auditFlags, System.Security.Principal.SecurityIdentifier sid, int accessMask, System.Security.AccessControl.InheritanceFlags inheritanceFlags, System.Security.AccessControl.PropagationFlags propagationFlags);member this.RemoveAudit : System.Security.AccessControl.AuditFlags * System.Security.Principal.SecurityIdentifier * int * System.Security.AccessControl.InheritanceFlags * System.Security.AccessControl.PropagationFlags -> boolPublic Function RemoveAudit (auditFlags As AuditFlags, sid As SecurityIdentifier, accessMask As Integer, inheritanceFlags As InheritanceFlags, propagationFlags As PropagationFlags) As BooleanParameters
- auditFlags
- AuditFlags
The type of audit rule to remove.
The SecurityIdentifier for which to remove an audit rule.
- accessMask
- Int32
The access mask for the rule to be removed.
- inheritanceFlags
- InheritanceFlags
Flags that specify the inheritance properties of the rule to be removed.
- propagationFlags
- PropagationFlags
Flags that specify the inheritance propagation properties for the rule to be removed.
Returns
true if this method successfully removes the specified audit rule; otherwise, false.
Remarks
Audit removal is accomplished by using a complex algorithm that might add ACEs in addition to removing them.
Applies to
RemoveAudit(AuditFlags, SecurityIdentifier, Int32, InheritanceFlags, PropagationFlags, ObjectAceFlags, Guid, Guid)
Removes the specified audit rule from the current SystemAcl object. Use this method for directory object Access Control Lists (ACLs) when specifying the object type or the inherited object type.
public:
bool RemoveAudit(System::Security::AccessControl::AuditFlags auditFlags, System::Security::Principal::SecurityIdentifier ^ sid, int accessMask, System::Security::AccessControl::InheritanceFlags inheritanceFlags, System::Security::AccessControl::PropagationFlags propagationFlags, System::Security::AccessControl::ObjectAceFlags objectFlags, Guid objectType, Guid inheritedObjectType);public bool RemoveAudit (System.Security.AccessControl.AuditFlags auditFlags, System.Security.Principal.SecurityIdentifier sid, int accessMask, System.Security.AccessControl.InheritanceFlags inheritanceFlags, System.Security.AccessControl.PropagationFlags propagationFlags, System.Security.AccessControl.ObjectAceFlags objectFlags, Guid objectType, Guid inheritedObjectType);member this.RemoveAudit : System.Security.AccessControl.AuditFlags * System.Security.Principal.SecurityIdentifier * int * System.Security.AccessControl.InheritanceFlags * System.Security.AccessControl.PropagationFlags * System.Security.AccessControl.ObjectAceFlags * Guid * Guid -> boolPublic Function RemoveAudit (auditFlags As AuditFlags, sid As SecurityIdentifier, accessMask As Integer, inheritanceFlags As InheritanceFlags, propagationFlags As PropagationFlags, objectFlags As ObjectAceFlags, objectType As Guid, inheritedObjectType As Guid) As BooleanParameters
- auditFlags
- AuditFlags
The type of audit rule to remove.
The SecurityIdentifier for which to remove an audit rule.
- accessMask
- Int32
The access mask for the rule to be removed.
- inheritanceFlags
- InheritanceFlags
Flags that specify the inheritance properties of the rule to be removed.
- propagationFlags
- PropagationFlags
Flags that specify the inheritance propagation properties for the rule to be removed.
- objectFlags
- ObjectAceFlags
Flags that specify if the objectType and inheritedObjectType parameters contain non-null values.
- objectType
- Guid
The identity of the class of objects to which the removed audit control rule applies.
- inheritedObjectType
- Guid
The identity of the class of child objects which can inherit the removed audit rule.
Returns
true if this method successfully removes the specified audit rule; otherwise, false.
Remarks
Audit removal is accomplished by using a complex algorithm that might add ACEs in addition to removing them.
Applies to
Feedback
Coming soon: Throughout 2024 we will be phasing out GitHub Issues as the feedback mechanism for content and replacing it with a new feedback system. For more information see: https://aka.ms/ContentUserFeedback.
Submit and view feedback for