ObjectDeleteAuditAlarmA function (winbase.h)

Article
02/22/2024

The ObjectDeleteAuditAlarm function generates audit messages when an object is deleted. Alarms are not currently supported.

Syntax

BOOL ObjectDeleteAuditAlarmA(
  [in] LPCSTR SubsystemName,
  [in] LPVOID HandleId,
  [in] BOOL   GenerateOnClose
);

Parameters

[in] SubsystemName

A pointer to a null-terminated string specifying the name of the subsystem calling the function. This string appears in any audit message that the function generates.

[in] HandleId

Specifies a unique value representing the client's handle to the object. This must be the same value that was passed to the AccessCheckAndAuditAlarm or ObjectOpenAuditAlarm function.

[in] GenerateOnClose

Specifies a flag set by a call to the AccessCheckAndAuditAlarm or ObjectOpenAuditAlarm function when the object handle is created.

Return value

If the function succeeds, the return value is a nonzero value.

If the function fails, the return value is zero. To get extended error information, call GetLastError.

Remarks

The ObjectDeleteAuditAlarm function requires the calling application to have the SE_AUDIT_NAME privilege enabled. The test for this privilege is always performed against the primary token of the calling process, allowing the calling process to impersonate a client.

Requirements

Requirement	Value
Minimum supported client	Windows XP [desktop apps only]
Minimum supported server	Windows Server 2003 [desktop apps only]
Target Platform	Windows
Header	winbase.h (include Windows.h)
Library	Advapi32.lib
DLL	Advapi32.dll