ObjectCloseAuditAlarm

	BOOL ObjectCloseAuditAlarm(SubsystemName, HandleId, GenerateOnClose)
	LPTSTR SubsystemName;
	LPVOID HandleId;
	BOOL GenerateOnClose;

The ObjectCloseAuditAlarm function generates audit and alarm messages when a handle to a server application object is deleted.

Parameters

SubsystemName

Pointer to a string that is the name of the subsystem calling the function.

HandleId

A unique value representing the client's handle to the object.

GenerateOnClose

A Boolean value returned from a corresponding AccessCheckAndAuditAlarm call or ObjectOpenAuditAlarm call when the object handle was created.

Return Value

The return value is TRUE if the function was successful, or FALSE if an error occurred. Use the GetLastError function to obtain extended error information.

Comments

This function may generate and send many messages to Port objects. This may result in a significant latency before returning. The design of routines that call ObjectCloseAuditAlarm must take this potential latency into account. This may have an impact on the approach taken for data structure mutex locking, for example.

The ObjectPrivilegeAuditAlarm function requires the caller to have SeSecurityPrivilege privilege. The test for this privilege is always against the primary token of the calling process, allowing the caller to be impersonating a client during the call with no ill effects.