Platform SDK: Active Directory, ADSI, and Directory Services

ADS_SD_CONTROL_ENUM

The ADS_SD_CONTROL_ENUM enumeration specifies control flags for a security descriptor.

typedef enum {
  ADS_SD_CONTROL_SE_OWNER_DEFAULTED       = 0x0001,
  ADS_SD_CONTROL_SE_GROUP_DEFAULTED       = 0x0002,
  ADS_SD_CONTROL_SE_DACL_PRESENT          = 0x0004,
  ADS_SD_CONTROL_SE_DACL_DEFAULTED        = 0x0008,
  ADS_SD_CONTROL_SE_SACL_PRESENT          = 0x0010,
  ADS_SD_CONTROL_SE_SACL_DEFAULTED        = 0x0020,
  ADS_SD_CONTROL_SE_DACL_AUTO_INHERIT_REQ = 0x0100,
  ADS_SD_CONTROL_SE_SACL_AUTO_INHERIT_REQ = 0x0200,
  ADS_SD_CONTROL_SE_DACL_AUTO_INHERITED   = 0x0400,
  ADS_SD_CONTROL_SE_SACL_AUTO_INHERITED   = 0x0800,
  ADS_SD_CONTROL_SE_DACL_PROTECTED        = 0x1000,
  ADS_SD_CONTROL_SE_SACL_PROTECTED        = 0x2000
  ADS_SD_CONTROL_SE_SELF_RELATIVE         = 0x8000,
  } ADS_SD_CONTROL_ENUM;

Elements

ADS_SD_CONTROL_SE_OWNER_DEFAULTED: A default mechanism provides the owner security identifier (SID) of the security descriptor rather than the original provider of the security descriptor.
ADS_SD_CONTROL_SE_GROUP_DEFAULTED: A default mechanism provides the group SID of the security descriptor rather than the original provider of the security descriptor.
ADS_SD_CONTROL_SE_DACL_PRESENT: The discretionary access-control list (DACL) is present in the security descriptor. If this flag is not set, or if this flag is set and the DACL is NULL, the security descriptor allows full access to everyone.
ADS_SD_CONTROL_SE_DACL_DEFAULTED: The security descriptor uses a default DACL built from the creator's access token.
ADS_SD_CONTROL_SE_SACL_PRESENT: The system access-control list (SACL) is present in the security descriptor.
ADS_SD_CONTROL_SE_SACL_DEFAULTED: The security descriptor uses a default SACL built from the creator's access token.
ADS_SD_CONTROL_SE_DACL_AUTO_INHERIT_REQ: THE DACL of the security descriptor must be inherited.
ADS_SD_CONTROL_SE_SACL_AUTO_INHERIT_REQ: The SACL of the security descriptor must be inherited.
ADS_SD_CONTROL_SE_DACL_AUTO_INHERITED: The DACL of the security descriptor supports automatic propagation of inheritable access-control entries (ACEs) to existing child objects.
ADS_SD_CONTROL_SE_SACL_AUTO_INHERITED: The SACL of the security descriptor supports automatic propagation of inheritable ACEs to existing child objects.
ADS_SD_CONTROL_SE_DACL_PROTECTED: The security descriptor will not allow inheritable ACEs to modify the DACL.
ADS_SD_CONTROL_SE_SACL_PROTECTED: The security descriptor will not allow inheritable ACEs to modify the SACL.
ADS_SD_CONTROL_SE_SELF_RELATIVE: The security descriptor is of self-relative format with all the security information in a continuous block of memory.

Remarks

For more information, see Access Control under Security in the Microsoft Platform SDK documentation.

Note Because VBScript cannot read information from a type library, VBScript applications do not understand the symbolic constants as defined above. You should use the numerical constants instead to set the appropriate flags in your VBScript applications. If you want to use the symbolic constants as a good programming practice, you should make explicit declarations of such constants, as done here, in your VBScript applications.

Requirements

  Windows NT/2000: Requires Windows 2000 (or Windows NT 4.0 with DSClient).
  Windows 95/98: Requires Windows 95 or later (with DSClient).
  Header: Declared in Iads.h.

ADS_SD_CONTROL_ENUM

Elements

Remarks

Requirements

See Also