SetAccessForIEAppContainer function

Applies an access mask to a securable kernel object and enables Internet Explorer 11 to access the object when enhanced protected mode (EPM) is enabled..

Syntax

HRESULT WINAPI SetAccessForIEAppContainer(
  _In_ HANDLE       hObject,
  _In_ IEObjectType dwObjectType,
  _In_ DWORD        dwAccessMask
);

Parameters

  • hObject [in]
    A handle to the target object, the one to receive the .

  • dwObjectType [in]
    A value identifying the type of the object specified by the handle.

  • dwAccessMask [in]
    A set of ACCESS_MASK flags specifying the desired access permissions.

Return value

This function can return one of these values.

Return code Description
S_OK

The function completed successfully.

E_ACCESSDENIED

The current process does not have permission to apply the access mask (or the ACL) to the target object.

Remarks

This function applies an access control list (ACL) to the target kernel object and adds the Internet AppContainer security identifier (SID) to the ACL of the target object. When applied, the SID allows IE11 to access the target object when enhanced protected mode (EPM) is enabled.

Requirements

Minimum supported client

Windows 8.1

Minimum supported server

Windows Server 2012 R2

Product

IE11

Header

Urlmon.h

Library

Urlmon.idl

DLL

Urlmon.dll