WbemPrivilegeEnum enumeration (wbemdisp.h)

The WbemPrivilegeEnum constants define privileges. These constants are used with SWbemSecurity to grant the privileges required for some operations. For more information, see Privilege Constants.

The WMI scripting type library, wbemdisp.tlb defines these constants. Microsoft Visual Basic applications can access this library; script languages must use the value of the constant directly, unless they use Windows Script Host (WSH) XML file format. For more information, see Using the WMI Scripting Type Library.

Syntax

typedef enum WbemPrivilegeEnum {
  wbemPrivilegeCreateToken = 1,
  wbemPrivilegePrimaryToken = 2,
  wbemPrivilegeLockMemory = 3,
  wbemPrivilegeIncreaseQuota = 4,
  wbemPrivilegeMachineAccount = 5,
  wbemPrivilegeTcb = 6,
  wbemPrivilegeSecurity = 7,
  wbemPrivilegeTakeOwnership = 8,
  wbemPrivilegeLoadDriver = 9,
  wbemPrivilegeSystemProfile = 10,
  wbemPrivilegeSystemtime = 11,
  wbemPrivilegeProfileSingleProcess = 12,
  wbemPrivilegeIncreaseBasePriority = 13,
  wbemPrivilegeCreatePagefile = 14,
  wbemPrivilegeCreatePermanent = 15,
  wbemPrivilegeBackup = 16,
  wbemPrivilegeRestore = 17,
  wbemPrivilegeShutdown = 18,
  wbemPrivilegeDebug = 19,
  wbemPrivilegeAudit = 20,
  wbemPrivilegeSystemEnvironment = 21,
  wbemPrivilegeChangeNotify = 22,
  wbemPrivilegeRemoteShutdown = 23,
  wbemPrivilegeUndock = 24,
  wbemPrivilegeSyncAgent = 25,
  wbemPrivilegeEnableDelegation = 26,
  wbemPrivilegeManageVolume = 27
} ;

Constants

 
wbemPrivilegeCreateToken
Value: 1
Required to create a primary token.
wbemPrivilegePrimaryToken
Value: 2
Required to assign the primary token of a process.
wbemPrivilegeLockMemory
Value: 3
Required to lock physical pages in memory.
wbemPrivilegeIncreaseQuota
Value: 4
Required to increase the quota assigned to a process.
wbemPrivilegeMachineAccount
Value: 5
Required to create a machine account.
wbemPrivilegeTcb
Value: 6
Identifies its holder as part of the trusted computer base. Some trusted, protected subsystems are granted this privilege.
wbemPrivilegeSecurity
Value: 7
Required to perform a number of security-related functions, such as controlling and viewing audit messages. This privilege identifies its holder as a security operator.
wbemPrivilegeTakeOwnership
Value: 8
Required to take ownership of an object without being granted discretionary access. This privilege allows the owner value to be set only to those values that the holder may legitimately assign as the owner of an object.
wbemPrivilegeLoadDriver
Value: 9
Required to load or unload a device driver.
wbemPrivilegeSystemProfile
Value: 10
Required to gather profiling information for the entire system.
wbemPrivilegeSystemtime
Value: 11
Required to modify the system time.
wbemPrivilegeProfileSingleProcess
Value: 12
Required to gather profiling information for a single process.
wbemPrivilegeIncreaseBasePriority
Value: 13
Required to increase the base priority of a process.
wbemPrivilegeCreatePagefile
Value: 14
Required to create a paging file.
wbemPrivilegeCreatePermanent
Value: 15
Required to create a permanent object.
wbemPrivilegeBackup
Value: 16
Required to perform backup operations.
wbemPrivilegeRestore
Value: 17
Required to perform restore operations. This privilege enables you to set any valid user or group security identifier (SID) as the owner of an object.
wbemPrivilegeShutdown
Value: 18
Required to shut down a local system.
wbemPrivilegeDebug
Value: 19
Required to debug a process.
wbemPrivilegeAudit
Value: 20
Required to generate audit-log entries.
wbemPrivilegeSystemEnvironment
Value: 21
Required to modify the nonvolatile RAM of systems that use this type of memory to store configuration information.
wbemPrivilegeChangeNotify
Value: 22
Required to receive notifications of changes to files or directories. This privilege also causes the system to skip all traversal access checks. It is enabled by default for all users.
wbemPrivilegeRemoteShutdown
Value: 23
Required to shut down a system using a network request.
wbemPrivilegeUndock
Value: 24
Required to remove a computer from a docking station.
wbemPrivilegeSyncAgent
Value: 25
Required to synchronize directory service data.
wbemPrivilegeEnableDelegation
Value: 26
Required to enable computer and user accounts to be trusted for delegation.
wbemPrivilegeManageVolume
Value: 27
Required to perform volume maintenance tasks.

Requirements

Requirement Value
Minimum supported client Windows Vista
Minimum supported server Windows Server 2008
Header wbemdisp.h

See also

Privilege Constants

SWbemSecurity.Privileges

Scripting API Constants