IGPMGPO::SetSecurityDescriptor method

Sets the security descriptor for the GPO. The method replaces the existing security descriptor.

Syntax


HRESULT SetSecurityDescriptor(
  [inlong lFlags,
        objIADsSecurityDescriptor,
  [in] IDispatch *pSD
);

Parameters

lFlags [in]

Specifies a set of bit flags. Use this parameter to specify the parts of the security descriptor to set.

OWNER_SECURITY_INFORMATION (1)

Owner identifier of the object.

GROUP_SECURITY_INFORMATION (2)

Primary group identifier.

DACL_SECURITY_INFORMATION (4)

Discretionary ACL of the object.

SACL_SECURITY_INFORMATION (8)

System ACL of the object.

objIADsSecurityDescriptor

IADsSecurityDescriptor object to set.

pSD [in]

The security descriptor to set.

Return value

JScript

Returns S_OK if successful. Returns a failure code if an error occurs.

VB

Returns S_OK if successful. Returns a failure code if an error occurs.

Remarks

For more information about ACLs and the security model for controlling access to Windows objects, see the Access Control topic .

Requirements

Minimum supported client

Windows Vista

Minimum supported server

Windows Server 2008

Header

Gpmgmt.h

IDL

Gpmgmt.idl

DLL

Gpmgmt.dll

IID

IID_IGPMGPO is defined as 58CC4352-1CA3-48E5-9864-1DA4D6E0D60F

See also

IGPMGPO
Access Control

 

 

Show: