Platform SDK: Active Directory, ADSI, and Directory Services

ADS_ACETYPE_ENUM

The ADS_ACETYPE_ENUM enumeration specifies types of access-control entries (ACEs).

enum {
  ADS_ACETYPE_ACCESS_ALLOWED           = 0,
  ADS_ACETYPE_ACCESS_DENIED            = 0x1,
  ADS_ACETYPE_SYSTEM_AUDIT             = 0x2,
  ADS_ACETYPE_ACCESS_ALLOWED_OBJECT    = 0x5,
  ADS_ACETYPE_ACCESS_DENIED_OBJECT     = 0x6,
  ADS_ACETYPE_SYSTEM_AUDIT_OBJECT      = 0x7
  } ADS_ACETYPE_ENUM;

Elements

ADS_ACETYPE_ACCESS_ALLOWED
The ACE is of the standard ACCESS ALLOWED type, where the ObjectType and InheritedOjectType fields are NULL.
ADS_ACETYPE_ACCESS_DENIED
The ACE is of the standard ACCESS_DENIED type, where the ObjectType and InheritedObjectType fields are NULL.
ADS_ACETYPE_SYSTEM_AUDIT
The ACE is of the standard system type, where the ObjectType and InheritedObjectType fields are NULL.
ADS_ACETYPE_ACCESS_ALLOWED_OBJECT
The ACE is of the ADSI extension of the ACCESS ALLOWED type, where either ObjectType or InheritedObjectType or both contain a GUID.
ADS_ACETYPE_ACCESS_DENIED_OBJECT
The ACE is of the ADSI extension of the ACCCESS_DENIED type, where either ObjectType or InheritedObjectType or both contain a GUID.
ADS_ACETYPE_SYSTEM_AUDIT_OBJECT
The ACE is of the ADSI extension of the system type, where either ObjectType or InheritedObjectType or both contain a GUID.

Remarks

A standard ACE is the one defined and used in a Windows NT®/Windows® 2000 security descriptor. ADSI extension allows the ACE to be applied to objects and properties identified by GUIDs.

Use the IADsAccessControlEntry property method to determine the ACE type.

Note  Because VBScript cannot read information from a type library, VBScript applications do not understand the symbolic constants as defined above. You should use the numerical constants instead to set the appropriate flags in your VBScript applications. If you want to use the symbolic constants as a good programming practice, you should make explicit declarations of such constants, as done here, in your VBScript applications.

Requirements

  Windows NT/2000: Requires Windows 2000 (or Windows NT 4.0 with DSClient).
  Windows 95/98: Requires Windows 95 or later (with DSClient).
  Header: Declared in Iads.h.

See Also

ADSI Enumerations, IADsAccessControlEntry