Directory Services

IADsSecurityUtility

The IADsSecurityUtility interface is used to get, set, or retrieve the security descriptor on a file, fileshare, or registry key. You can also use it to convert the security descriptor to or from raw or hexadecimal mode and you can limit the scope of the security descriptor data retrieved or set by indicating whether you want it for the owner, group, DACL, or SACL.

Methods in Vtable Order

The IADsSecurityUtility interface inherits the methods of the standard COM interfaces:

In addition, IADsSecurityUtility defines the following methods.

Method Description
get_SecurityMask Enables you select the security mask to use when getting or setting the security descriptor.
put_SecurityMask Enables you select the security mask to use when getting or setting the security descriptor.
GetSecurityDescriptor Method used to retrieve the security descriptor of a file, fileshare, or registry key object.
SetSecurityDescriptor Method used to set the security descriptor of a file, fileshare, or registry key object.
ConvertSecurityDescriptor Method used to convert the security descriptor of a file, fileshare, or registry key object.

Properties

The IADsSecurityUtility interface defines the following property. The preceding table includes access methods for this property.

Property Description
SecurityMask Enables you to select the security mask to use when getting or setting the security descriptor.

Requirements

Client: Included in Windows XP.
Server: Included in Windows Server 2003.
Header: Declared in Iads.h.

See Also

ADS_PATHTYPE_ENUM, ADS_SD_FORMAT_ENUM, IADsAccessControlEntry, IAccessControlList, IADsSecurityDescriptor, Security Interfaces, Retrieving, Setting, or Modifying Security Descriptors on File Systems, File Shares, and Registry Keys