IGPMGPO::GetSecurityDescriptor method

Retrieves a pointer to an IDispatch interface from which the security descriptor for the Group Policy object (GPO) can be retrieved. For script programmers, this method returns a reference to an IADsSecurityDescriptor object.

Syntax

HRESULT GetSecurityDescriptor(
  long      lFlags,
  IDispatch **ppSD
);

Parameters

lFlags

Specifies a set of bit flags. Use this parameter to specify the parts of the security descriptor to retrieve. The following values are valid.

OWNER_SECURITY_INFORMATION (1)

Owner identifier of the object.

GROUP_SECURITY_INFORMATION (2)

Primary group identifier.

DACL_SECURITY_INFORMATION (4)

Discretionary access control list (DACL) of the object.

SACL_SECURITY_INFORMATION (8)

System access control list (ACL) of the object.

ppSD

Address of a pointer to an IDispatch interface. You can call the IUnknown::QueryInterface method to obtain a pointer to the IADsSecurityDescriptor interface on the security descriptor of the GPO.

Return Value

C++

Returns S_OK if successful. Returns a failure code if an error occurs.

JScript

Returns a reference to an IADsSecurityDescriptor object.

VB

Returns a reference to an IADsSecurityDescriptor object.

Remarks

For more information about security descriptors, ACLs, and the security model for controlling access to Windows-based objects, see Access Control.

Requirements

   
Windows version Windows Vista Windows Server 2008
Target Platform Windows
Header gpmgmt.h
DLL Gpmgmt.dll

See Also

IGPMGPO