Child objects will inherit this access-control entry (ACE). The
inherited ACE is inheritable unless the
ADS_ACEFLAG_NO_PROPAGATE_INHERIT_ACE flag is set.
ADS_ACEFLAG_NO_PROPAGATE_INHERIT_ACE
The system will clear the ADS_ACEFLAG_INHERIT_ACE flag for the
inherited ACEs of child objects. This prevents the ACE from being
inherited by subsequent generations of objects.
ADS_ACEFLAG_INHERIT_ONLY_ACE
Indicates an inherit-only ACE that does not exercise access
control on the object to which it is attached. If this flag is not
set, the ACE is an effective ACE that exerts access control on the
object to which it is attached.
ADS_ACEFLAG_INHERITED_ACE
Indicates whether or not the ACE was inherited. The system sets
this bit.
ADS_ACEFLAG_VALID_INHERIT_FLAGS
Indicates whether the inherit flags are valid. The system sets
this bit.
ADS_ACEFLAG_SUCCESSFUL_ACCESS
Generates audit messages for successful access attempts, used
with ACEs that audit the system in a system access-control list
(SACL).
ADS_ACEFLAG_FAILED_ACCESS
Generates audit messages for failed access attempts, used with
ACEs that audit the system in a SACL.
Remarks
Because VBScript cannot read information from a type library,
VBScript applications do not understand the symbolic constants as
defined in these enumerations. You should use the numerical
constants instead to set the appropriate flags in your VBScript
applications. If you want to use the symbolic constants as a good
programming practice, you should make explicit declarations of such
constants, as done here, in your VBScript applications.
Requirements
Client: Included in Windows XP and
Windows 2000 Professional. Server: Included in Windows Server 2003 and
Windows 2000 Server. Redistributable: Requires Active Directory Client Extension
on Windows NT 4.0 SP6a and Windows 95/98/Me. Header: Declared in Iads.h.