IGPMGPO::GetSecurityDescriptor method (gpmgmt.h)

Article
10/13/2021

Retrieves a pointer to an IDispatch interface from which the security descriptor for the Group Policy object (GPO) can be retrieved. For script programmers, this method returns a reference to an IADsSecurityDescriptor object.

Syntax

HRESULT GetSecurityDescriptor(
  [in]  long      lFlags,
  [out] IDispatch **ppSD
);

Parameters

[in] lFlags

Specifies a set of bit flags. Use this parameter to specify the parts of the security descriptor to retrieve. The following values are valid.

OWNER_SECURITY_INFORMATION (1)

Owner identifier of the object.

GROUP_SECURITY_INFORMATION (2)

Primary group identifier.

DACL_SECURITY_INFORMATION (4)

Discretionary access control list (DACL) of the object.

SACL_SECURITY_INFORMATION (8)

System access control list (ACL) of the object.

[out] ppSD

Address of a pointer to an IDispatch interface. You can call the IUnknown::QueryInterface method to obtain a pointer to the IADsSecurityDescriptor interface on the security descriptor of the GPO.

Return value

C++

Returns S_OK if successful. Returns a failure code if an error occurs.

JScript

Returns a reference to an IADsSecurityDescriptor object.

VB

Returns a reference to an IADsSecurityDescriptor object.

Remarks

For more information about security descriptors, ACLs, and the security model for controlling access to Windows-based objects, see Access Control.

Requirements

Requirement	Value
Minimum supported client	Windows Vista
Minimum supported server	Windows Server 2008
Target Platform	Windows
Header	gpmgmt.h
DLL	Gpmgmt.dll

Share via