AUDIT_PARAM_TYPE enumeration

The AUDIT_PARAM_TYPE enumeration defines the type of audit parameters that are available.

Syntax


typedef enum _AUDIT_PARAM_TYPE { 
  APT_None            = 1,
  APT_String          = ,
  APT_Ulong           = ,
  APT_Pointer         = ,
  APT_Sid             = ,
  APT_LogonId         = ,
  APT_ObjectTypeList  = ,
  APT_Luid            = ,
  APT_Guid            = ,
  APT_Time            = ,
  APT_Int64           = ,
  APT_IpAddress       = ,
  APT_LogonIdWithSid  = 
} AUDIT_PARAM_TYPE;

Constants

APT_None

No audit options.

APT_String

A string that terminates with NULL.

APT_Ulong

An unsigned long.

APT_Pointer

A pointer that is used to specify handles and pointers. These are 32-bit on 32-bit systems and 64-bit on 64-bit systems. Use this option when you are interested in the absolute value of the pointer. The memory to which the pointer points is not marshaled when using this type.

APT_Sid

The security identifier (SID).

APT_LogonId

The logon identifier (LUID) that results in three output parameters:

  • Account name
  • Authority name
  • LogonID""
APT_ObjectTypeList

Object type list.

APT_Luid

LUID that is not translated to LogonId.

APT_Guid

GUID.

APT_Time

Time as FILETIME.

APT_Int64

ULONGLONG.

APT_IpAddress

IP Address (IPv4 and IPv6). This logs the address as the first parameter and the port as the second parameter. You must ensure that two entries are added in the event message file. You should ensure that the buffer size is 128 bytes.

APT_LogonIdWithSid

Logon ID with SID that results in four output parameters:

  • SID
  • Account name
  • Authority name
  • LogonID

Requirements

Minimum supported client

Windows XP [desktop apps only]

Minimum supported server

Windows Server 2003 [desktop apps only]

Header

Adtgen.h

 

 

Community Additions

ADD
Show:
© 2014 Microsoft