Distributed COM provides an implementation of the IAccessControlinterface.

COM servers can use this implementation to help protect their objects from unauthorized access in a manner that is supported by Microsoft® Windows® 95, Microsoft Windows 98, Microsoft Windows NT®, and Microsoft Windows 2000.

To get a pointer to this implementation, call the CoCreateInstancefunction, specifying CLSID_DCOMAccessControl as the CLSID. This implementation supports the IPersistinterface to save the state of the access control object.

Note:
If you decide to implement IAccessControland pass your implementation to the CoInitializeSecurityfunction, you must ensure that it is completely thread-safe, because COM can call it on any thread, at any time.

In addition to the COM implementation of IAccessControl, another implementation is supplied for storage and Directory Service objects.

Call methods of the IAccessControlinterface to manage access to objects and properties and to obtain access information.

This interface primarily sets process security with a call to CoInitializeSecurity, specifying capability flag EOAC_ACCESS_CONTROL and providing a pointer to an instance of IAccessControlas the first ( pVoid) parameter. Then, COM calls IAccessControlmethods to determine access rights.

IAccessControlshould only be used to manage access rights. To manage launch permissions, use DCOMCNFG or set the LaunchPermission named value under the APPID registry key.

COM formats all character strings as Unicode. You must convert all ANSI strings to Unicode before passing them to methods of an implementation of IAccessControl.

The following table shows the methods for this interface in the order that the compiler calls the methods. Like all COM interfaces, this interface inherits the methods for the IUnknowninterface.

To determine whether the platform supports this interface, see Determining Supported COM APIs.