An ADSI SecurityDescriptor Object represents the set of properties and methods needed to support ACLs and other security information for a directory service object. This includes discretionary and system ACLs in addition to object ownership and group memberships. Because security descriptor objects are included in the ADSTYPE enumeration, objects can add a property using the IADs::Put feature to add security rules at run time.
Implement ADSI SecurityDescriptor Objects when you are providing an Active Directory Service implementation that supports ACLs.
The ADSI SDK comes with a system implementation of this object in the Microsoft-supplied WinNT provider.
| Interfaces typically supported on ADSI Directory Object | Description | ||
|---|---|---|---|
| IUnknown | Universal COM object management and interface query methods. | ||
| IDispatch | Automation methods for late-bound access to an object's methods and properties. | ||
| IADsSecurityDescriptor | Security property management for directory service objects. | ||
Windows NT: Use version 4.0 and later.
ADSI AccessControlList Object, Using Credentials and Security