ADS_ACETYPE_ENUM enumeration

The ADS_ACETYPE_ENUM enumeration is used to specify the type of an access-control entry for Active Directory objects. The IADsAccessControlEntry.AceType property contains one of these values for an Active Directory object.

For more information and possible values for file, file share and registry objects, see the AceType member of the ACE_HEADER structure.

Syntax


typedef enum  { 
  ADS_ACETYPE_ACCESS_ALLOWED                  = 0,
  ADS_ACETYPE_ACCESS_DENIED                   = 0x1,
  ADS_ACETYPE_SYSTEM_AUDIT                    = 0x2,
  ADS_ACETYPE_ACCESS_ALLOWED_OBJECT           = 0x5,
  ADS_ACETYPE_ACCESS_DENIED_OBJECT            = 0x6,
  ADS_ACETYPE_SYSTEM_AUDIT_OBJECT             = 0x7,
  ADS_ACETYPE_SYSTEM_ALARM_OBJECT             = 0x8,
  ADS_ACETYPE_ACCESS_ALLOWED_CALLBACK         = 0x9,
  ADS_ACETYPE_ACCESS_DENIED_CALLBACK          = 0xA,
  ADS_ACETYPE_ACCESS_ALLOWED_CALLBACK_OBJECT  = 0xB,
  ADS_ACETYPE_ACCESS_DENIED_CALLBACK_OBJECT   = 0xC,
  ADS_ACETYPE_SYSTEM_AUDIT_CALLBACK           = 0xD,
  ADS_ACETYPE_SYSTEM_ALARM_CALLBACK           = 0xE,
  ADS_ACETYPE_SYSTEM_AUDIT_CALLBACK_OBJECT    = 0xF,
  ADS_ACETYPE_SYSTEM_ALARM_CALLBACK_OBJECT    = 0x10
} ADS_ACETYPE_ENUM;

Constants

ADS_ACETYPE_ACCESS_ALLOWED

The ACE is of the standard ACCESS ALLOWED type, where the ObjectType and InheritedObjectType fields are NULL.

ADS_ACETYPE_ACCESS_DENIED

The ACE is of the standard system-audit type, where the ObjectType and InheritedObjectType fields are NULL.

ADS_ACETYPE_SYSTEM_AUDIT

The ACE is of the standard system type, where the ObjectType and InheritedObjectType fields are NULL.

ADS_ACETYPE_ACCESS_ALLOWED_OBJECT

The ACE grants access to an object or a subobject of the object, such as a property set or property. ObjectType or InheritedObjectType or both contain a GUID that identifies a property set, property, extended right, or type of child object.

Windows NT 4.0:  Not used.

ADS_ACETYPE_ACCESS_DENIED_OBJECT

The ACE denies access to an object or a subobject of the object, such as a property set or property. ObjectType or InheritedObjectType or both contain a GUID that identifies a property set, property, extended right, or type of child object.

Windows NT 4.0:  Not used.

ADS_ACETYPE_SYSTEM_AUDIT_OBJECT

The ACE audits access to an object or a subobject of the object, such as a property set or property. ObjectType or InheritedObjectType or both contain a GUID that identifies a property set, property, extended right, or type of child object.

Windows NT 4.0:  Not used.

ADS_ACETYPE_SYSTEM_ALARM_OBJECT

Not used.

ADS_ACETYPE_ACCESS_ALLOWED_CALLBACK

Same functionality as ADS_ACETYPE_ACCESS_ALLOWED, but used with applications that use Authz to verify ACEs.

Windows NT 4.0:  Not used.

ADS_ACETYPE_ACCESS_DENIED_CALLBACK

Same functionality as ADS_ACETYPE_ACCESS_DENIED, but used with applications that use Authz to verify ACEs.

Windows NT 4.0:  Not used.

ADS_ACETYPE_ACCESS_ALLOWED_CALLBACK_OBJECT

Same functionality as ADS_ACETYPE_ACCESS_ALLOWED_OBJECT, but used with applications that use Authz to verify ACEs.

Windows NT 4.0:  Not used.

ADS_ACETYPE_ACCESS_DENIED_CALLBACK_OBJECT

Same functionality as ADS_ACETYPE_ACCESS_DENIED_OBJECT, but used with applications that use Authz to check ACEs.

Windows NT 4.0:  Not used.

ADS_ACETYPE_SYSTEM_AUDIT_CALLBACK

Same functionality as ADS_ACETYPE_SYSTEM_AUDIT, but used with applications that use Authz to check ACEs.

Windows NT 4.0:  Not used.

ADS_ACETYPE_SYSTEM_ALARM_CALLBACK

Not used.

ADS_ACETYPE_SYSTEM_AUDIT_CALLBACK_OBJECT

Same functionality as ADS_ACETYPE_SYSTEM_AUDIT_OBJECT, but used with applications that use Authz to verify ACEs.

Windows NT 4.0:  Not used.

ADS_ACETYPE_SYSTEM_ALARM_CALLBACK_OBJECT

Not used.

Remarks

A standard ACE is one defined and used in a Windows 2000 or Windows NT security descriptor. Windows 2000 enables the ACE to be applied to objects and properties identified by GUIDs.

Use the IADsAccessControlEntry property method to determine the ACE type.

Note  Because Visual Basic Scripting Edition (VBScript) cannot read data from a type library, VBScript applications cannot recognize symbolic constants as defined above. Use the numeric constants instead to set the appropriate flags in VBScript applications. To use the symbolic constants as a good programming practice, write explicit declarations of such constants, as done here, in VBScript applications.

Requirements

Minimum supported client

Windows 2000 Professional [desktop apps only]

Minimum supported server

Windows 2000 Server [desktop apps only]

Header

Iads.h

See also

IADsAccessControlEntry.AceType
ADSI Enumerations
IADsAccessControlEntry

 

 

Show:
© 2014 Microsoft. All rights reserved.