2.2.1.2 POLICY_SYSTEM_ACCESS_MODE
The POLICY_SYSTEM_ACCESS_MODE data type determines the way in which a user (member of a group or alias) is allowed to access the system. All values can be combined in any way by using bitwise OR operations.
|
Value |
Meaning |
|---|---|
|
0x00000000 |
No access The user is not granted any access to the system. |
|
POLICY_MODE_INTERACTIVE 0x00000001 |
The user can logon locally to the system. |
|
POLICY_MODE_NETWORK 0x00000002 |
The user can logon to the system over the network. |
|
POLICY_MODE_BATCH 0x00000004 |
The user can logon to the system as a batch job. |
|
0x00000008 |
Reserved |
|
POLICY_MODE_SERVICE 0x00000010 |
The user can logon to the system as a service. |
|
0x00000020 |
Reserved |
|
POLICY_MODE_DENY_INTERACTIVE 0x00000040 |
The user is denied the right to interactively logon to the system. This setting supersedes POLICY_MODE_INTERACTIVE. |
|
POLICY_MODE_DENY_NETWORK 0x00000080 |
The user is denied the right to logon to the system from the network. This setting supersedes POLICY_MODE_NETWORK. |
|
POLICY_MODE_DENY_BATCH 0x00000100 |
The user is denied the right to logon to the system as a batch job. This setting supersedes POLICY_MODE_BATCH. |
|
POLICY_MODE_DENY_SERVICE 0x00000200 |
The user is denied the right to logon to the system as a service. This setting supersedes POLICY_MODE_SERVICE. |
|
POLICY_MODE_REMOTE_INTERACTIVE 0x00000400 |
The user can logon to the system as a Remote Desktop client. |
|
POLICY_MODE_DENY_REMOTE_INTERACTIVE 0x00000800 |
The user is denied the right to logon to the system as a Remote Desktop client. |
|
POLICY_MODE_ALL 0x00000FF7 |
This flag indicates all allowed bits.<13> |
|
POLICY_MODE_ALL_NT4 0x00000037 |
This flag indicates all allowed bits.<14> |
The following citation contains a timeline of when each mode was introduced.<15>