다음을 통해 공유

SMS_SecuredObject Server WMI Class

  • 아티클

Applies To: System Center Configuration Manager 2007, System Center Configuration Manager 2007 R2, System Center Configuration Manager 2007 R3, System Center Configuration Manager 2007 SP1, System Center Configuration Manager 2007 SP2

The SMS_SecuredObject Windows Management Instrumentation (WMI) class is an SMS Provider server class, in Configuration Manager, that represents a secured object. For more information about SMS Provider rights, see https://go.microsoft.com/fwlink/?LinkId=110808.

The following syntax is simplified from Managed Object Format (MOF) code and includes all inherited properties.

Class SMS_SecuredObject : SMS_BaseClass
{
     UInt32 AvailableClassPermissions;
     UInt32 AvailableInstancePermissions;
     UInt32 DefaultClassPermissions;
     UInt32 DefaultInstancePermissions;
     UInt32 ObjectKey
     String ObjectName;
};

Methods

The following table lists methods in SMS_SecuredObject.

Method Description

GetCollectionsWithResourcePermissions Method in Class SMS_SecuredObject

Gets the list of collection identifiers for the collections to which the user has the specified permissions.

RefreshNTGroupMembership Method in Class SMS_SecuredObject

Refreshes the information stored about the user's Windows group membership.

UserHasPermissions Method in Class SMS_SecuredObject

Determines whether a user has permissions for an object.

Properties

  • AvailableClassPermissions
    Data type: UInt32

    Access type: Read-only

    Qualifiers: [bits, ResID(1505), ResDLL("SMS_RSTT.dll")]

    Set of available global permissions that can be set for the specified class. Possible values are listed below. The default value is 0.

    0

    READ

    1

    MODIFY

    2

    DELETE

    3

    DISTRIBUTE

    4

    Not used

    5

    REMOTE_CONTROL

    6

    ADVERTISE

    7

    MODIFY_RESOURCE

    8

    ADMINISTER

    9

    DELETE_RESOURCE

    10

    CREATE

    11

    VIEW_COLL_FILE

    12

    READ_RESOURCE

    13

    DELEGATE

    14

    METER

    15

    MANAGESQLCOMMAND

    16

    MANAGESTATUSFILTER

    17

    MANAGEFOLDER

    18

    NETWORKACCESS

    19

    IMPORTMACHINE

    20

    CREATETSMEDIA

    21

    MODIFYCOLLECTIONSETTING

    22

    MANAGEOSDCERTIFICATE

    23

    RECOVERUSERSTATE

  • AvailableInstancePermissions
    Data type: UInt32

    Access type: Read-only

    Qualifiers: [bits, ResID(1506), ResDLL("SMS_RSTT.dll")]

    Set of available permissions that can be set for an instance of the specified class. Possible values are listed below. The default value is 0.

    0

    READ

    1

    MODIFY

    2

    DELETE

    3

    DISTRIBUTE

    4

    Not used

    5

    REMOTE_CONTROL

    6

    ADVERTISE

    7

    MODIFY_RESOURCE

    8

    ADMINISTER

    9

    DELETE_RESOURCE

    10

    CREATE

    11

    VIEW_COLL_FILE

    12

    READ_RESOURCE

    13

    DELEGATE

    14

    METER

    15

    MANAGESQLCOMMAND

    16

    MANAGESTATUSFILTER

    17

    MANAGEFOLDER

    18

    NETWORKACCESS

    19

    IMPORTMACHINE

    20

    CREATETSMEDIA

    21

    MODIFYCOLLECTIONSETTING

    22

    MANAGEOSDCERTIFICATE

    23

    RECOVERUSERSTATE

  • DefaultClassPermissions
    Data type: UInt32

    Access type: Read/Write

    Qualifiers: [bits, ResID(1503), ResDLL("SMS_RSTT.dll")]

    Set of default permissions that all users and groups are granted for the specified class. Possible values are listed below. The default value is 0.

    0

    READ

    1

    MODIFY

    2

    DELETE

    3

    DISTRIBUTE

    4

    Not used

    5

    REMOTE_CONTROL

    6

    ADVERTISE

    7

    MODIFY_RESOURCE

    8

    ADMINISTER

    9

    DELETE_RESOURCE

    10

    CREATE

    11

    VIEW_COLL_FILE

    12

    READ_RESOURCE

    13

    DELEGATE

    14

    METER

    15

    MANAGESQLCOMMAND

    16

    MANAGESTATUSFILTER

    17

    MANAGEFOLDER

    18

    NETWORKACCESS

    19

    IMPORTMACHINE

    20

    CREATETSMEDIA

    21

    MODIFYCOLLECTIONSETTING

    22

    MANAGEOSDCERTIFICATE

    23

    RECOVERUSERSTATE

    24

    MANAGEBMC

    25

    VIEWBMC

  • DefaultInstancePermissions
    Data type: UInt32

    Access type: Read/Write

    Qualifiers: [bits, ResID(1504), ResDLL("SMS_RSTT.dll")]

    Set of default instance permissions that all users and groups are granted for the specified class. Possible values are listed below. The default value is 0.

    0

    READ

    1

    MODIFY

    2

    DELETE

    3

    DISTRIBUTE

    4

    Not used

    5

    REMOTE_CONTROL

    6

    ADVERTISE

    7

    MODIFY_RESOURCE

    8

    ADMINISTER

    9

    DELETE_RESOURCE

    10

    CREATE

    11

    VIEW_COLL_FILE

    12

    READ_RESOURCE

    13

    DELEGATE

    14

    METER

    15

    MANAGESQLCOMMAND

    16

    MANAGESTATUSFILTER

    17

    MANAGEFOLDER

    18

    NETWORKACCESS

    19

    IMPORTMACHINE

    20

    CREATETSMEDIA

    21

    MODIFYCOLLECTIONSETTING

    22

    MANAGEOSDCERTIFICATE

    23

    RECOVERUSERSTATE

    24

    MANAGEBMC

    25

    VIEWBMC

  • ObjectName
    Data type: String

    Access type: Read/Write

    Qualifiers: [ResID(1502), ResDLL("SMS_RSTT.dll")]

    Class name of the secured object.

Remarks

There are no special class qualifiers for this class. For more information about both the class qualifiers and the property qualifiers included in the Properties section, see Configuration Manager Class and Property Qualifiers.

The Configuration Manager objects that can be secured are defined by the ObjectKey property.

The DELEGATE permission applies to all objects listed in ObjectKey except SMS_StatusMessage.

METER only applies to the SMS_Site object and allows the targeting of metering rules to a site.

Manage SQL commands and Manage Status Filter only apply to SMS_Site. These permissions allow management of SQL commands and status filter rules, respectively. Because both of these permissions can allow arbitrary code to run with elevated privileges, they require special credentials.

Requirements

Runtime Requirements

For more information, see Configuration Manager Server Runtime Requirements.

Development Requirements

For more information, see Configuration Manager Server Development Requirements.

See Also

Concepts

Security Server WMI Classes