ADS_ACETYPE_ENUM

The ADS_ACETYPE_ENUM enumeration specifies types of access-control entries (ACEs).

typedef enum 
{
  ADS_ACETYPE_ACCESS_ALLOWED = 0, 
  ADS_ACETYPE_ACCESS_DENIED = 0x1, 
  ADS_ACETYPE_SYSTEM_AUDIT = 0x2, 
  ADS_ACETYPE_ACCESS_ALLOWED_OBJECT = 0x5, 
  ADS_ACETYPE_ACCESS_DENIED_OBJECT = 0x6, 
  ADS_ACETYPE_SYSTEM_AUDIT_OBJECT = 0x7, 
  ADS_ACETYPE_SYSTEM_ALARM_OBJECT = 0x8
} ADS_ACETYPE_ENUM;

Values

ADS_ACETYPE_ACCESS_ALLOWED

The ACE is of the standard ACCESS ALLOWED type, where the ObjectType and InheritedObjectType fields are NULL.

ADS_ACETYPE_ACCESS_DENIED

The ACE is of the standard system-audit type, where the ObjectType and InheritedObjectType fields are NULL.

ADS_ACETYPE_SYSTEM_AUDIT

The ACE is of the standard system type, where the ObjectType and InheritedObjectType fields are NULL.

ADS_ACETYPE_ACCESS_ALLOWED_OBJECT

Windows 2000: The ACE grants access to an object or a subobject of the object, such as a property set or property. ObjectType or InheritedObjectType or both contain a GUID that identifies a property set, property, extended right, or type of child object.

ADS_ACETYPE_ACCESS_DENIED_OBJECT

Windows 2000: The ACE denies access to an object or a subobject of the object, such as a property set or property. ObjectType or InheritedObjectType or both contain a GUID that identifies a property set, property, extended right, or type of child object.

ADS_ACETYPE_SYSTEM_AUDIT_OBJECT

Windows 2000: The ACE audits access to an object or a subobject of the object, such as a property set or property. ObjectType or InheritedObjectType or both contain a GUID that identifies a property set, property, extended right, or type of child object.

ADS_ACETYPE_SYSTEM_ALARM_OBJECT

Windows 2000/XP: Not used at this time.

Remarks

A standard ACE is the one defined and used in a Windows NT®/Windows® 2000 security descriptor. Windows 2000 allows the ACE to be applied to objects and properties identified by GUIDs.

Use the IADsAccessControlEntry property method to determine the ACE type.

Note  Because VBScript cannot read information from a type library, VBScript applications do not understand the symbolic constants as defined above. You should use the numerical constants instead to set the appropriate flags in your VBScript applications. If you want to use the symbolic constants as a good programming practice, you should make explicit declarations of such constants, as done here, in your VBScript applications.

Requirements

Client: Included in Windows XP and Windows 2000 Professional.
Server: Included in Windows Server 2003 and Windows 2000 Server.
Redistributable: Requires Active Directory Client Extension on Windows NT 4.0 SP6a and Windows 95/98/Me.
Header: Declared in Iads.h.

See Also

ADSI Enumerations, IADsAccessControlEntry