SeDeleteObjectAuditAlarm function (ntifs.h)

The SeDeleteObjectAuditAlarm routine generates audit and alarm messages for an object that is marked for deletion.

Syntax

void SeDeleteObjectAuditAlarm(
  [in] PVOID  Object,
  [in] HANDLE Handle
);

Parameters

[in] Object

Address of the object.

[in] Handle

A unique 32-bit value representing the client's handle to the object.

Return value

None

Remarks

Callers of SeDeleteObjectAuditAlarm must have SeAuditPrivilege enabled. The test for this privilege is always performed against the primary token of the calling process, allowing the calling process to impersonate a client.

For more information about security and access control, see Windows security model for driver developers and the documentation on these topics in the Windows SDK.

Requirements

See also

SeAuditingFileEvents

SeAuditingFileOrGlobalEvents

SeOpenObjectAuditAlarm

SeOpenObjectForDeleteAuditAlarm