SeDeleteObjectAuditAlarm function (ntifs.h)
The SeDeleteObjectAuditAlarm routine generates audit and alarm messages for an object that is marked for deletion.
Syntax
void SeDeleteObjectAuditAlarm(
[in] PVOID Object,
[in] HANDLE Handle
);
Parameters
[in] Object
Address of the object.
[in] Handle
A unique 32-bit value representing the client's handle to the object.
Return value
None
Remarks
Callers of SeDeleteObjectAuditAlarm must have SeAuditPrivilege enabled. The test for this privilege is always performed against the primary token of the calling process, allowing the calling process to impersonate a client.
For more information about security and access control, see Windows security model for driver developers and the documentation on these topics in the Windows SDK.
Requirements
| Requirement | Value |
|---|---|
| Target Platform | Universal |
| Header | ntifs.h (include Ntifs.h) |
| Library | NtosKrnl.lib |
| DLL | NtosKrnl.exe |
| IRQL | PASSIVE_LEVEL |