SystemAcl.RemoveAudit Method

Definition

Removes the specified audit rule from the current SystemAcl object.

Overloads

RemoveAudit(SecurityIdentifier, ObjectAuditRule)

Removes the specified audit rule from the current SystemAcl object.

RemoveAudit(AuditFlags, SecurityIdentifier, Int32, InheritanceFlags, PropagationFlags)

Removes the specified audit rule from the current SystemAcl object.

RemoveAudit(AuditFlags, SecurityIdentifier, Int32, InheritanceFlags, PropagationFlags, ObjectAceFlags, Guid, Guid)

Removes the specified audit rule from the current SystemAcl object. Use this method for directory object Access Control Lists (ACLs) when specifying the object type or the inherited object type.

Remarks

Audit removal is accomplished by using a complex algorithm that might add ACEs in addition to removing them.

RemoveAudit(SecurityIdentifier, ObjectAuditRule)

Removes the specified audit rule from the current SystemAcl object.

public bool RemoveAudit (System.Security.Principal.SecurityIdentifier sid, System.Security.AccessControl.ObjectAuditRule rule);

Parameters

sid
SecurityIdentifier

The SecurityIdentifier for which to remove an audit rule.

rule
ObjectAuditRule

The ObjectAuditRule for which to remove an audit rule.

Returns

true if this method successfully removes the specified audit rule; otherwise, false.

Remarks

Audit removal is accomplished by using a complex algorithm that might add ACEs in addition to removing them.

Applies to

.NET 9 and other versions
Product Versions
.NET Core 1.0, Core 1.1, 6 (package-provided), 6, 7, 8, 9
.NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8, 4.8.1
.NET Standard 2.0 (package-provided)
Windows Desktop 3.0, 3.1, 5

RemoveAudit(AuditFlags, SecurityIdentifier, Int32, InheritanceFlags, PropagationFlags)

Removes the specified audit rule from the current SystemAcl object.

public bool RemoveAudit (System.Security.AccessControl.AuditFlags auditFlags, System.Security.Principal.SecurityIdentifier sid, int accessMask, System.Security.AccessControl.InheritanceFlags inheritanceFlags, System.Security.AccessControl.PropagationFlags propagationFlags);

Parameters

auditFlags
AuditFlags

The type of audit rule to remove.

sid
SecurityIdentifier

The SecurityIdentifier for which to remove an audit rule.

accessMask
Int32

The access mask for the rule to be removed.

inheritanceFlags
InheritanceFlags

Flags that specify the inheritance properties of the rule to be removed.

propagationFlags
PropagationFlags

Flags that specify the inheritance propagation properties for the rule to be removed.

Returns

true if this method successfully removes the specified audit rule; otherwise, false.

Remarks

Audit removal is accomplished by using a complex algorithm that might add ACEs in addition to removing them.

Applies to

.NET 9 and other versions
Product Versions
.NET Core 1.0, Core 1.1, 6 (package-provided), 6, 7, 8, 9
.NET Framework 2.0, 3.0, 3.5, 4.0, 4.5, 4.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8, 4.8.1
.NET Standard 2.0 (package-provided)
Windows Desktop 3.0, 3.1, 5

RemoveAudit(AuditFlags, SecurityIdentifier, Int32, InheritanceFlags, PropagationFlags, ObjectAceFlags, Guid, Guid)

Removes the specified audit rule from the current SystemAcl object. Use this method for directory object Access Control Lists (ACLs) when specifying the object type or the inherited object type.

public bool RemoveAudit (System.Security.AccessControl.AuditFlags auditFlags, System.Security.Principal.SecurityIdentifier sid, int accessMask, System.Security.AccessControl.InheritanceFlags inheritanceFlags, System.Security.AccessControl.PropagationFlags propagationFlags, System.Security.AccessControl.ObjectAceFlags objectFlags, Guid objectType, Guid inheritedObjectType);

Parameters

auditFlags
AuditFlags

The type of audit rule to remove.

sid
SecurityIdentifier

The SecurityIdentifier for which to remove an audit rule.

accessMask
Int32

The access mask for the rule to be removed.

inheritanceFlags
InheritanceFlags

Flags that specify the inheritance properties of the rule to be removed.

propagationFlags
PropagationFlags

Flags that specify the inheritance propagation properties for the rule to be removed.

objectFlags
ObjectAceFlags

Flags that specify if the objectType and inheritedObjectType parameters contain non-null values.

objectType
Guid

The identity of the class of objects to which the removed audit control rule applies.

inheritedObjectType
Guid

The identity of the class of child objects which can inherit the removed audit rule.

Returns

true if this method successfully removes the specified audit rule; otherwise, false.

Remarks

Audit removal is accomplished by using a complex algorithm that might add ACEs in addition to removing them.

Applies to

.NET 9 and other versions
Product Versions
.NET Core 1.0, Core 1.1, 6 (package-provided), 6, 7, 8, 9
.NET Framework 2.0, 3.0, 3.5, 4.0, 4.5, 4.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8, 4.8.1
.NET Standard 2.0 (package-provided)
Windows Desktop 3.0, 3.1, 5