2.2.1.10 SE_GROUP Attributes

  • Article

These values are attributes of a security group membership and can be combined by using the bitwise OR operation. They are used by an access check mechanism to specify whether the membership is to be used in an access check decision. The values can be set by using the SamrSetMemberAttributesOfGroup method.

Constant/value

Description

SE_GROUP_MANDATORY

0x00000001

The SID cannot have the SE_GROUP_ENABLED attribute removed.

SE_GROUP_ENABLED_BY_DEFAULT

0x00000002

The SID is enabled by default (rather than being added by an application).

SE_GROUP_ENABLED

0x00000004

The SID is enabled for access checks.