IGPMGPO::GetSecurityDescriptor method

Retrieves a pointer to an IDispatch interface from which the security descriptor for the Group Policy object (GPO) can be retrieved. For script programmers, this method returns a reference to an IADsSecurityDescriptor object.

Syntax


HRESULT GetSecurityDescriptor(
  [in]   long lFlags,
  [out]  IDispatch **ppSD
);

Parameters

lFlags [in]

Specifies a set of bit flags. Use this parameter to specify the parts of the security descriptor to retrieve. The following values are valid.

ValueMeaning
OWNER_SECURITY_INFORMATION
1

Owner identifier of the object.

GROUP_SECURITY_INFORMATION
2

Primary group identifier.

DACL_SECURITY_INFORMATION
4

Discretionary access control list (DACL) of the object.

SACL_SECURITY_INFORMATION
8

System access control list (ACL) of the object.

 

ppSD [out]

Address of a pointer to an IDispatch interface. You can call the IUnknown::QueryInterface method to obtain a pointer to the IADsSecurityDescriptor interface on the security descriptor of the GPO.

Return value

C++

Returns S_OK if successful. Returns a failure code if an error occurs.

JScript

Returns a reference to an IADsSecurityDescriptor object.

VB

Returns a reference to an IADsSecurityDescriptor object.

Remarks

For more information about security descriptors, ACLs, and the security model for controlling access to Windows-based objects, see Access Control.

Requirements

Minimum supported client

Windows Vista

Minimum supported server

Windows Server 2008

Redistributable

GPMC on Windows Server 2003 or Windows XP with SP1

Header

Gpmgmt.h

IDL

Gpmgmt.idl

DLL

Gpmgmt.dll

IID

IID_IGPMGPO is defined as 58CC4352-1CA3-48E5-9864-1DA4D6E0D60F

See also

IGPMGPO

 

 

Show:
© 2014 Microsoft