ACCESS_DENIED_ACE

The ACCESS_DENIED_ACE structure defines an access-control entry (ACE) for the discretionary access-control list (ACL) controlling access to an object. An access-denied ACE denies access to an object for a specific subject identified by a security identifier (SID).

typedef struct _ACCESS_DENIED_ACE { // adace 
    ACE_HEADER Header; 
    ACCESS_MASK Mask; 
    DWORD SidStart; 
} ACCESS_DENIED_ACE; 
 

Members

Header

Specifies an ACE_HEADER structure.

Mask

Specifies an ACCESS_MASK structure specifying the access rights explicitly denied by this ACE.

SidStart

Specifies a SID. The access rights specified by the Mask member are denied to any subject possessing an enabled SID matching this member.

Remarks

ACE structures must be aligned on doubleword boundaries. All Win32 memory-management functions return doubleword-aligned handles to memory.

QuickInfo

  Windows NT: Requires version 3.1 or later.
  Windows: Unsupported.
  Windows CE: Unsupported.
  Header: Declared in winnt.h.

See Also

Low-Level Access-Control Overview, Low-Level Access Control Structures, AddAccessDeniedAce, ACCESS_ALLOWED_ACE, ACCESS_MASK, ACE_HEADER, ACL, SID, SYSTEM_ALARM_ACE, SYSTEM_AUDIT_ACE