IGPMGPO::GetSecurityDescriptor method

Retrieves a pointer to an IDispatch interface from which the security descriptor for the Group Policy object (GPO) can be retrieved. For script programmers, this method returns a reference to an IADsSecurityDescriptor object.

Syntax


HRESULT GetSecurityDescriptor(
  [in]  long lFlags,
  [out] IDispatch **ppSD
);

Parameters

lFlags [in]

Specifies a set of bit flags. Use this parameter to specify the parts of the security descriptor to retrieve. The following values are valid.

OWNER_SECURITY_INFORMATION (1)

Owner identifier of the object.

GROUP_SECURITY_INFORMATION (2)

Primary group identifier.

DACL_SECURITY_INFORMATION (4)

Discretionary access control list (DACL) of the object.

SACL_SECURITY_INFORMATION (8)

System access control list (ACL) of the object.

ppSD [out]

Address of a pointer to an IDispatch interface. You can call the IUnknown::QueryInterface method to obtain a pointer to the IADsSecurityDescriptor interface on the security descriptor of the GPO.

Return value

C++

Returns S_OK if successful. Returns a failure code if an error occurs.

JScript

Returns a reference to an IADsSecurityDescriptor object.

VB

Returns a reference to an IADsSecurityDescriptor object.

Remarks

For more information about security descriptors, ACLs, and the security model for controlling access to Windows-based objects, see Access Control.

Requirements

Minimum supported client

Windows Vista

Minimum supported server

Windows Server 2008

Header

Gpmgmt.h

IDL

Gpmgmt.idl

DLL

Gpmgmt.dll

IID

IID_IGPMGPO is defined as 58CC4352-1CA3-48E5-9864-1DA4D6E0D60F

See also

IGPMGPO

 

 

Show: