The ObjectPrivilegeAuditAlarm function generates audit messages as a result of a client’s attempt to perform a privileged operation on a server application object using an already opened handle of that object. Alarms are not supported in the current version of Windows NT.
BOOL ObjectPrivilegeAuditAlarm(
LPCTSTR SubsystemName, |
// pointer to string for subsystem name |
LPVOID HandleId, |
// pointer to handle identifier |
HANDLE ClientToken, |
// handle to client’s access token |
DWORD DesiredAccess, |
// mask for desired access rights |
PPRIVILEGE_SET Privileges, |
// pointer to privileges |
BOOL AccessGranted |
// flag for results |
); |
If the function succeeds, the return value is nonzero.
If the function fails, the return value is zero. To get extended error information, call GetLastError.
The ObjectPrivilegeAuditAlarm function requires the calling process to have SE_AUDIT_NAME privilege. The test for this privilege is always performed against the primary token of the calling process, not the impersonation token of the thread. This allows the calling process to impersonate a client during the call.
The ObjectPrivilegeAuditAlarm function can send many messages to port objects. This can result in a significant delay before the function returns. The design of applications calling ObjectPrivilegeAuditAlarm can take this potential delay into account. For example, this consideration may affect the design of an application using mutexes to lock structures.
AccessCheck, AccessCheckAndAuditAlarm, AreAllAccessesGranted, AreAnyAccessesGranted, MapGenericMask, ObjectCloseAuditAlarm, ObjectOpenAuditAlarm, PrivilegeCheck, PrivilegedServiceAuditAlarm, PRIVILEGE_SET
file: /Techref/os/win/api/win32/func/src/f65_3.htm, 5KB, , updated: 2000/4/7 11:19, local time: 2024/11/5 15:25,
3.145.54.254:LOG IN ©2024 PLEASE DON'T RIP! THIS SITE CLOSES OCT 28, 2024 SO LONG AND THANKS FOR ALL THE FISH!
|
©2024 These pages are served without commercial sponsorship. (No popup ads, etc...).Bandwidth abuse increases hosting cost forcing sponsorship or shutdown. This server aggressively defends against automated copying for any reason including offline viewing, duplication, etc... Please respect this requirement and DO NOT RIP THIS SITE. Questions? <A HREF="http://massmind.org/techref/os/win/api/win32/func/src/f65_3.htm"> ObjectPrivilegeAuditAlarm</A> |
Did you find what you needed? |
Welcome to massmind.org! |
Welcome to massmind.org! |
.