IAzAuthorizationStore::DeletePolicyAdministratorName method (azroles.h)

The DeletePolicyAdministratorName method removes the specified account name from the list of principals that act as policy administrators.

Syntax

HRESULT DeletePolicyAdministratorName(
  [in]           BSTR    bstrAdmin,
  [in, optional] VARIANT varReserved
);

Parameters

[in] bstrAdmin

The account name to remove from the list of policy administrators. The account name must be in user principal name (UPN) format (for example, "someone@example.com"). The LookupAccountName function is called to retrieve the domain.

[in, optional] varReserved

Reserved for future use.

Return value

If the method succeeds, the method returns S_OK.

Any other HRESULT value indicates that the operation failed.

Remarks

Policy administrators for an object can perform the following tasks:

• Read the object
• Write attributes to the object
• Read attributes of child objects of the object
• Write attributes to child objects of the object
• Delete the object
• Delete child objects of the object
• Create child objects of the object

To view the list of policy administrators in account name format, use the PolicyAdministratorsName property.

Requirements

Requirement	Value
Minimum supported client	Windows Vista [desktop apps only]
Minimum supported server	Windows Server 2003 [desktop apps only]
Target Platform	Windows
Header	azroles.h
Library	Azroles.lib
DLL	Azroles.dll
Redistributable	Windows Server 2003 Administration Tools Pack on Windows XP