2.2.7 EVENTLOG_HANDLE_A and EVENTLOG_HANDLE_W

  • Article

The event log remote interface on a particular server is referred to by a handle, which can be EVENTLOG_HANDLE_A or EVENTLOG_HANDLE_W. In the specific case of the event log remote interface, the handle is nothing more than the name of the server providing the interface. The name can be specified using either Unicode or ANSI, and the formats are:

 typedef [handle, unique] wchar_t* EVENTLOG_HANDLE_W;
 typedef [handle, unique] char* EVENTLOG_HANDLE_A;

Some of the EventLog Remoting Protocol methods (for more information, see section 3.1.4) have an EVENTLOG_HANDLE_W or EVENTLOG_HANDLE_A as their first argument. In these methods, the client maps this string to an RPC binding handle. The server ignores this argument. See [C706] sections 4.3.5 and 5.1.5.2.