GetConfigurationSecurityDescriptor method of the Win32_DCOMApplicationSetting class

The GetConfigurationSecurityDescriptor WMI method gets the security descriptor that controls who is allowed to configure a DCOM application. The security descriptor is a instance of the Win32_SecurityDescriptor class. The account running the script or application that calls this method must have the SeSecurityPrivilege and SeRestorePrivilege privileges. For more information, see Changing Access Security on Securable Objects.

Syntax


uint32 GetConfigurationSecurityDescriptor(
  [out] Win32_SecurityDescriptor Descriptor
);

Parameters

Descriptor [out]

The security descriptor to set for the DCOM application.

Return value

Returns one of the values listed in the following list, or a different value to indicate an error. For more information, see WMI Return Codes or WbemErrorEnum.

Success

0

Successful completion

2

The user does not have access to the requested information

8

Unknown failure

9

The user does not have adequate privileges to execute the method

21

A parameter specified in the method call is invalid

Other

1–4294967295

Remarks

The Win32_SecurityDescriptor instance represents a SECURITY_DESCRIPTOR_CONTROL data type and contains a discretionary access control list (DACL) and a system access control list (SACL). For more information, see Access Control Lists.

If the SeSecurityPrivilege is not granted or enabled when getting a security descriptor, then only the DACL is returned in the returned security descriptor. For more information, see Privilege Constants and Executing Privileged Operations.

Requirements

Minimum supported client

Windows Vista

Minimum supported server

Windows Server 2008

Namespace

Root\CIMV2

MOF

CIMWin32.mof

DLL

CIMWin32.dll

See also

Win32_DCOMApplicationSetting
Privilege Constants
WMI Security Descriptor Objects
Changing Access Security on Securable Objects

 

 

Show: