SystemAcl.RemoveAudit Method

Definition

Namespace:

System.Security.AccessControl

Assembly:

System.Security.AccessControl.dll

Removes the specified audit rule from the current SystemAcl object.

Overloads

RemoveAudit(SecurityIdentifier, ObjectAuditRule)	Removes the specified audit rule from the current SystemAcl object.
RemoveAudit(AuditFlags, SecurityIdentifier, Int32, InheritanceFlags, PropagationFlags)	Removes the specified audit rule from the current SystemAcl object.
RemoveAudit(AuditFlags, SecurityIdentifier, Int32, InheritanceFlags, PropagationFlags, ObjectAceFlags, Guid, Guid)	Removes the specified audit rule from the current SystemAcl object. Use this method for directory object Access Control Lists (ACLs) when specifying the object type or the inherited object type.

Remarks

Audit removal is accomplished by using a complex algorithm that might add ACEs in addition to removing them.

RemoveAudit(SecurityIdentifier, ObjectAuditRule)

Removes the specified audit rule from the current SystemAcl object.

public:
 bool RemoveAudit(System::Security::Principal::SecurityIdentifier ^ sid, System::Security::AccessControl::ObjectAuditRule ^ rule);

public bool RemoveAudit (System.Security.Principal.SecurityIdentifier sid, System.Security.AccessControl.ObjectAuditRule rule);

member this.RemoveAudit : System.Security.Principal.SecurityIdentifier * System.Security.AccessControl.ObjectAuditRule -> bool

Public Function RemoveAudit (sid As SecurityIdentifier, rule As ObjectAuditRule) As Boolean

Parameters

sid

SecurityIdentifier

The SecurityIdentifier for which to remove an audit rule.

rule

ObjectAuditRule

The ObjectAuditRule for which to remove an audit rule.

Returns

Boolean

true if this method successfully removes the specified audit rule; otherwise, false.

Remarks

Audit removal is accomplished by using a complex algorithm that might add ACEs in addition to removing them.

RemoveAudit(AuditFlags, SecurityIdentifier, Int32, InheritanceFlags, PropagationFlags)

Removes the specified audit rule from the current SystemAcl object.

public:
 bool RemoveAudit(System::Security::AccessControl::AuditFlags auditFlags, System::Security::Principal::SecurityIdentifier ^ sid, int accessMask, System::Security::AccessControl::InheritanceFlags inheritanceFlags, System::Security::AccessControl::PropagationFlags propagationFlags);

public bool RemoveAudit (System.Security.AccessControl.AuditFlags auditFlags, System.Security.Principal.SecurityIdentifier sid, int accessMask, System.Security.AccessControl.InheritanceFlags inheritanceFlags, System.Security.AccessControl.PropagationFlags propagationFlags);

member this.RemoveAudit : System.Security.AccessControl.AuditFlags * System.Security.Principal.SecurityIdentifier * int * System.Security.AccessControl.InheritanceFlags * System.Security.AccessControl.PropagationFlags -> bool

Public Function RemoveAudit (auditFlags As AuditFlags, sid As SecurityIdentifier, accessMask As Integer, inheritanceFlags As InheritanceFlags, propagationFlags As PropagationFlags) As Boolean

Parameters

auditFlags

AuditFlags

The type of audit rule to remove.

sid

SecurityIdentifier

The SecurityIdentifier for which to remove an audit rule.

accessMask

Int32

The access mask for the rule to be removed.

inheritanceFlags

InheritanceFlags

Flags that specify the inheritance properties of the rule to be removed.

propagationFlags

PropagationFlags

Flags that specify the inheritance propagation properties for the rule to be removed.

Returns

Boolean

true if this method successfully removes the specified audit rule; otherwise, false.

Remarks

Audit removal is accomplished by using a complex algorithm that might add ACEs in addition to removing them.

RemoveAudit(AuditFlags, SecurityIdentifier, Int32, InheritanceFlags, PropagationFlags, ObjectAceFlags, Guid, Guid)

Removes the specified audit rule from the current SystemAcl object. Use this method for directory object Access Control Lists (ACLs) when specifying the object type or the inherited object type.

public:
 bool RemoveAudit(System::Security::AccessControl::AuditFlags auditFlags, System::Security::Principal::SecurityIdentifier ^ sid, int accessMask, System::Security::AccessControl::InheritanceFlags inheritanceFlags, System::Security::AccessControl::PropagationFlags propagationFlags, System::Security::AccessControl::ObjectAceFlags objectFlags, Guid objectType, Guid inheritedObjectType);

public bool RemoveAudit (System.Security.AccessControl.AuditFlags auditFlags, System.Security.Principal.SecurityIdentifier sid, int accessMask, System.Security.AccessControl.InheritanceFlags inheritanceFlags, System.Security.AccessControl.PropagationFlags propagationFlags, System.Security.AccessControl.ObjectAceFlags objectFlags, Guid objectType, Guid inheritedObjectType);

member this.RemoveAudit : System.Security.AccessControl.AuditFlags * System.Security.Principal.SecurityIdentifier * int * System.Security.AccessControl.InheritanceFlags * System.Security.AccessControl.PropagationFlags * System.Security.AccessControl.ObjectAceFlags * Guid * Guid -> bool

Public Function RemoveAudit (auditFlags As AuditFlags, sid As SecurityIdentifier, accessMask As Integer, inheritanceFlags As InheritanceFlags, propagationFlags As PropagationFlags, objectFlags As ObjectAceFlags, objectType As Guid, inheritedObjectType As Guid) As Boolean

Parameters

auditFlags

AuditFlags

The type of audit rule to remove.

sid

SecurityIdentifier

The SecurityIdentifier for which to remove an audit rule.

accessMask

Int32

The access mask for the rule to be removed.

inheritanceFlags

InheritanceFlags

Flags that specify the inheritance properties of the rule to be removed.

propagationFlags

PropagationFlags

Flags that specify the inheritance propagation properties for the rule to be removed.

objectFlags

ObjectAceFlags

Flags that specify if the objectType and inheritedObjectType parameters contain non-null values.

objectType

Guid

The identity of the class of objects to which the removed audit control rule applies.

inheritedObjectType

Guid

The identity of the class of child objects which can inherit the removed audit rule.

Returns

Boolean

true if this method successfully removes the specified audit rule; otherwise, false.

Remarks

Audit removal is accomplished by using a complex algorithm that might add ACEs in addition to removing them.