CRegKey::SetKeySecurity

Call this method to set the security of the registry key.

LONG SetKeySecurity(
   SECURITY_INFORMATION si,
   PSECURITY_DESCRIPTOR psd 
) throw( );

Parameters

  • si
    Specifies the components of the security descriptor to set. The value can be a combination of the following values:

    Value

    Meaning

    DACL_SECURITY_INFORMATION

    Sets the key's discretionary access-control list (DACL). The key must have WRITE_DAC access, or the calling process must be the object's owner.

    GROUP_SECURITY_INFORMATION

    Sets the key's primary group security identifier (SID). The key must have WRITE_OWNER access, or the calling process must be the object's owner.

    OWNER_SECURITY_INFORMATION

    Sets the key's owner SID. The key must have WRITE_OWNER access, or the calling process must be the object's owner or have the SE_TAKE_OWNERSHIP_NAME privilege enabled.

    SACL_SECURITY_INFORMATION

    Sets the key's system access-control list (SACL). The key must have ACCESS_SYSTEM_SECURITY access. The proper way to get this access is to enable the SE_SECURITY_NAME privilege in the caller's current access token, open the handle for ACCESS_SYSTEM_SECURITY access, and then disable the privilege.

  • psd
    Pointer to a SECURITY_DESCRIPTOR structure that specifies the security attributes to set for the specified key.

Return Value

If the method succeeds, the return value is ERROR_SUCCESS. If the method fails, the return value is a nonzero error code defined in WINERROR.H.

Remarks

Sets the key's security attributes. See RegSetKeySecurity for more details.

Requirements

Header: atlbase.h

See Also

Reference

CRegKey Class

CRegKey::GetKeySecurity

Other Resources

CRegKey Members