In Windows Vista and later versions of Windows, the DEVPROP_TYPE_SECURITY_DESCRIPTOR_STRING identifier represents the base-data-type identifier that indicates the data type is a NULL-terminated Unicode string that contains a security descriptor in the Security Descriptor Definition Language (SDDL) format.


DEVPROP_TYPE_SECURITY_DESCRIPTOR_STRING can be combined only with the DEVPROP_TYPEMOD_LIST property-data-type modifier.

Setting a Property of this Type

To set a property whose base data type is DEVPROP_TYPE_SECURITY_DESCRIPTOR_STRING, call the corresponding SetupDiSet*Xxx* property function and set the function input parameters as follows:

  • Set the PropertyType parameter to DEVPROP_TYPE_SECURITY_DESCRIPTOR_STRING, set the PropertyBuffer parameter to a pointer to a buffer that contains a NULL-terminated security descriptor string, and set the PropertyBufferSize parameter to the size, in bytes, of the security descriptor string, including the NULL terminator.

  • Set the other function input parameters as appropriate to set the property.



Devpropdef.h (include Devpropdef.h)