IGPMSecurityInfo interface

The IGPMSecurityInfo interface defines the methods of the GPMSecurityInfo collection. This collection represents a set of policy-related permissions that can be set on a particular object, such as a scope of management (SOM), a GPO, or a WMI filter.

Members

The IGPMSecurityInfo interface inherits from the IDispatch interface. IGPMSecurityInfo also has these types of members:

Methods

The IGPMSecurityInfo interface has these methods.

MethodDescription
Add

Adds a specified permission to the GPMSecurityInfo collection.

Remove

Removes a permission level for a trustee from the GPMSecurityInfo collection.

RemoveTrustee

Removes all permissions for the given trustee from the GPMSecurityInfo collection.

 

Properties

The IGPMSecurityInfo interface has these properties.

PropertyAccess typeDescription

_NewEnum

Read-only

Retrieves an interface on an enumerator object for the GPMSecurityInfo collection.

Count

Read-only

Number of GPMPermission objects in the GPMSecurityInfo collection.

Item

Read-only

Retrieves a specific GPMPermission object from the GPMSecurityInfo collection.

 

Remarks

The interface divides the policy-related permissions into categories. The following table lists the categories, permissions included in the categories, and the object to which they can be applied.

Securable objectPermission categoryPermission level
SiteGPO linkingpermSOMLink
OUGPO linkingpermSOMLink
RSoP loggingpermSOMLogging
RSoP planningpermSOMPlanning
DomainGPO linkingpermSOMLink
Creating GPOspermSOMGPOCreate
RSoP loggingpermSOMLogging
RSoP planningpermSOMPlanning
Creating WMI filterspermSOMWMICreate
permSOMWMIFullControl
WMI filterEditing WMI filterspermWMIFilterEdit
Full control of all WMI filterspermWMIFilterFullControl
Custom control of WMI filterspermWMIFilterCustom
GPOSecurity filteringpermGPOApply
DelegationpermGPORead
permGPOEdit
permGPOEditSecurityAndDelete
permGPOCustom

 

The GPMSecurityInfo collection represents a collection of GPMPermission objects for a particular SOM, GPO, or WMI filter. Note however, that although the GPMSecurityInfo object is a collection object, it is not a typical collection object. This is because no action occurs if the Add method attempts to add a GPMPermission object for a trustee and the permission is below the level of an existing permission for that trustee. For more information, see the Add method.

For more information about policy-related permissions, see IGPM::CreatePermission.

Requirements

Minimum supported client

Windows Vista

Minimum supported server

Windows Server 2008

Header

Gpmgmt.h

IDL

Gpmgmt.idl

DLL

Gpmgmt.dll

IID

IID_IGPMSecurityInfo is defined as B6C31ED4-1C93-4D3E-AE84-EB6D61161B60

See also

IDispatch
IGPMPermission
IGPMTrustee

 

 

Show: