The ObjectOpenAuditAlarm function generates audit messages when a client application attempts to gain access to an object or to create a new one. Alarms are not supported in the current version of Windows NT.
BOOL ObjectOpenAuditAlarm(
LPCTSTR SubsystemName, |
// address of string for subsystem name |
LPVOID HandleId, |
// address of handle identifier |
LPTSTR ObjectTypeName, |
// address of string for object type |
LPTSTR ObjectName, |
// address of string for object name |
PSECURITY_DESCRIPTOR pSecurityDescriptor, |
// address of security descriptor |
HANDLE ClientToken, |
// handle of client’s access token |
DWORD DesiredAccess, |
// mask for desired access rights |
DWORD GrantedAccess, |
// mask for granted access rights |
PPRIVILEGE_SET Privileges, |
// address of privileges |
BOOL ObjectCreation, |
// flag for object creation |
BOOL AccessGranted, |
// flag for results |
LPBOOL GenerateOnClose |
// address of flag for audit generation |
); |
If the function succeeds, the return value is nonzero.
If the function fails, the return value is zero. To get extended error information, call GetLastError.
The ObjectOpenAuditAlarm function requires the calling application to have the SE_AUDIT_NAME privilege. The test for this privilege is always performed against the primary token of the calling process, not the impersonation token of the thread. This allows the calling process to impersonate a client during the call.
AccessCheck, AccessCheckAndAuditAlarm, AreAllAccessesGranted, AreAnyAccessesGranted, MapGenericMask, ObjectCloseAuditAlarm, ObjectDeleteAuditAlarm, ObjectPrivilegeAuditAlarm, PrivilegeCheck, PrivilegedServiceAuditAlarm, PRIVILEGE_SET, SECURITY_DESCRIPTOR
file: /Techref/os/win/api/win32/func/src/f65_2.htm, 7KB, , updated: 2002/1/7 02:38, local time: 2024/9/7 23:38,
18.222.117.136:LOG IN
|
©2024 These pages are served without commercial sponsorship. (No popup ads, etc...).Bandwidth abuse increases hosting cost forcing sponsorship or shutdown. This server aggressively defends against automated copying for any reason including offline viewing, duplication, etc... Please respect this requirement and DO NOT RIP THIS SITE. Questions? <A HREF="http://sxlist.com/techref/os/win/api/win32/func/src/f65_2.htm"> ObjectOpenAuditAlarm</A> |
Did you find what you needed? |
Welcome to sxlist.com!sales, advertizing, & kind contributors just like you! Please don't rip/copy (here's why Copies of the site on CD are available at minimal cost. |
Welcome to sxlist.com! |
.