3.1.4.23 ElfrChangeNotify (Opnum 6)

  • Article

The ElfrChangeNotify (Opnum 6) method is intended for local use.

 NTSTATUS ElfrChangeNotify(
   [in] IELF_HANDLE LogHandle,
   [in] RPC_CLIENT_ID ClientId,
   [in] ULONG Event
 );

LogHandle: Handle to an event log. This parameter is a server context handle, as specified in section 2.2.6.

ClientId: Ignored when the method is called remotely.

Event: Ignored when the method is called remotely.

Return Values: The method MUST return STATUS_SUCCESS (0x00000000) on success; the method always returns STATUS_INVALID_HANDLE (0xC0000008) when called remotely. For all other errors it MUST return an implementation-based, nonzero NTSTATUS value specified in [MS-ERREF].

In response to this request from the client, the server MUST first check that the handle is valid. The server MUST fail the operation with the error STATUS_INVALID_HANDLE (0xC0000008) if the handle is invalid.

The server MUST return an error code if the handle is remote.<42>