AuthzInitializeObjectAccessAuditEvent function

The AuthzInitializeObjectAccessAuditEvent function initializes auditing for an object.

Syntax

BOOL WINAPI AuthzInitializeObjectAccessAuditEvent(
  _In_  DWORD                         Flags,
  _In_  AUTHZ_AUDIT_EVENT_TYPE_HANDLE hAuditEventType,
  _In_  PWSTR                         szOperationType,
  _In_  PWSTR                         szObjectType,
  _In_  PWSTR                         szObjectName,
  _In_  PWSTR                         szAdditionalInfo,
  _Out_ PAUTHZ_AUDIT_EVENT_HANDLE     phAuditEvent,
  _In_  DWORD                         dwAdditionalParamCount
);

Parameters

Flags [in]

Modifies the audit. This parameter can be one of the following values.

Value	Meaning
AUTHZ_NO_SUCCESS_AUDIT	Disable generation of success audits.
AUTHZ_NO_FAILURE_AUDIT	Disable generation of failure audits.
AUTHZ_NO_ALLOC_STRINGS	Use pointers to the passed strings instead of allocating memory and copying the strings. The calling application must ensure that the passed memory stays valid during access checks.

 

hAuditEventType [in]

Reserved. This parameter should be set to NULL.

szOperationType [in]

String that indicates the operation that is to be audited.

szObjectType [in]

String that indicates the type of object being accessed.

szObjectName [in]

String the indicates the name of the object being accessed.

szAdditionalInfo [in]

String, defined by the Resource Manager, for additional audit information.

phAuditEvent [out]

Pointer that receives an AUTHZ_AUDIT_EVENT_HANDLE structure.

dwAdditionalParamCount [in]

Must be set to zero.

Return value

If the function succeeds, it returns TRUE.

If the function fails, it returns FALSE. For extended error information, call GetLastError.

Requirements

See also

Basic Access Control Functions

AuthzAccessCheck