Interfaces and Their Purpose

Interface Name

Purpose

IAccessEntry

Can be used to manipulate individual ACEs (Access Control Entries) in the ACL of the security descriptor. The securable object of Windows  must be associated with the COM object using the IObjectSecurity::AttachXXXX method before using the interface. The interface is for advanced manipulations of ACEs.

IAccessList

Can be used to view individual Access Control Entries (ACEs) in the Access Control List (ACL) of the security descriptor of an object. This interface represents a collection of ACEs.

IADs

Root of most interfaces. Most objects in DirectScript support this interface. It can be used to get some basic properties (such as the name, class, and parent) of an object.

IADsComputer

Primary Interface of the Computer object. It can be used to get properties (such as operating system and processor type) of computers.

IADsComputerOperations

Can be used to shut down a computer.

IADsContainer

Primary interface of all Container objects. It can be used to create, delete, copy, move, and enumerate contained objects. All container objects, including Namespace, Domain, Computer, File, and RegistryKey, support this interface.

IADsCollection

Enables objects to define and manage an arbitrary set of named data elements for a directory service.

IADsDomain

Primary interface of the Domain Object. It can be used to get or set domain properties such as minimum password length, auto unlock interval, and so on.

IADsFileServiceOperations

Manages sessions and resources on a computer.

IADsFileShare

Can be used to get and set properties of File Shares.

IADsGroup

Primary interface of the Group and Local Group objects. It can be use to get or set group properties, add or remove users to or from a group, and check whether a given user is a member of a group or not.

IADsMembers

Can be used to enumerate non-container objects like Groups.

IADsNTPolicy

Can be used to manage audit settings, user rights, and trusted domains for a computer

IADsPrintJob

Primary interface of the Print Job Object. It can be used to get and set properties of the Print Job object.

IADsPrintJobOperations

Can be used to pause or cancel a print job, change its priority, and so on.

IADsPrintQueue

Can be used to get and set the properties of the Print Queue object.

IADsPrintQueueOperations

Can be used to pause a print queue, purge jobs from the queue, and so on.

IADsResource

Manages resources opened on a computer

IADsService

Primary interface of the Services object. It can be used to get and set properties of Windows Services.

IADsServiceOperations

Can be used for various operations on Services.

IADsSession

Manages sessions on a computer

IADsUser

Primary interface of the User Object. It can be used to get or set user properties, and change the password of a specified user.

IAuditSecurity

Can be used to manage System Access Control Lists (SACLs) for Windows securable objects such as NTFS files and directories, registry and attached printers. It can also be used to get audit information such as audit permissions assigned to various users and groups and whether auditing is specified for a particular trustee.

IDelegation

Can be used to control delegation.

IDesignatedBDC Interface

Can be used to get and set designated Backup Domain Controllers (BDCs) for the specified domain.

IDocumentProperties

Enables to view and modify document properties.

IDomainServerManagement

Can be used to synchronize domains.

IDomainTrustManagement

Can be used to manage trust relationships between domains.

IEmailAlert

Can be used to set details of an e-mail message and its dispatch (sending).

IEventLogger

Can be used to set details of an event and its logging.

IFile

Can be used for directory and file operations.

IObjectSecurity

Can be used to manage the discretionary access control mechanism of Windows securable objects like NTFS files and directories, registry, and printer. It can be used to manage access to these objects, and to get access information like owner of an object, primary group and permissions granted to various users and groups.

IOpenResource

Manages resources opened by a connection.

IPagerAlert

Can be used to set details of a pager message and its dispatch (sending).

IPrintJobAdditionalOperations

Can be used to cancel or restart a print job.

IPrintQueueInfo

Can be used to get the name of a printer, its shared name, and check whether a printer is shared or not.

IPrintServer

Can be used to get various properties of the current computer as a print server

IPrintServer2

Can be used to add printers to a remote machine.

IRegistryKey

Can be used for system registry operations.

ISecurityIdentifier

Can be used to get the SIDs of the Computer, Domain, Local Group, Global Group, and User objects

ISendMessage

Can be used to send messages to specific users, computers, all users connected to a computer, or all users and computers in a domain.

IServiceObjectSecurity

Can be used to manage security on Windows  services. It can be used to give a user or group permissions to manage services, view the status of services running on a Windows computer, and so on. It can also be used to revoke permissions to view service status so that only authorized users can do such operations.

ISessionInfo

Used to get addition information about a session.

IUserDialinInfo

Can be used to get and set various dialin properties of a user.

IUserInfo

Can be used to get and set the home drive of a user. This interface provides additional user properties that are not supported in the IADsUser interface.