IGPMSecurityInfo interface (gpmgmt.h)

The IGPMSecurityInfo interface defines the methods of the GPMSecurityInfo collection. This collection represents a set of policy-related permissions that can be set on a particular object, such as a scope of management (SOM), a GPO, or a WMI filter.

Inheritance

The IGPMSecurityInfo interface inherits from the IDispatch interface. IGPMSecurityInfo also has these types of members:

Methods

The IGPMSecurityInfo interface has these methods.

IGPMSecurityInfo::Add Adds the permission specified in a GPMPermission object to the GPMSecurityInfo collection. You can add a permission that is above the level of existing permissions. For more information about restrictions that apply, see the following Remarks section.
IGPMSecurityInfo::get__NewEnum Retrieves an enumerator for the collection. (IGPMSecurityInfo.get__NewEnum)
IGPMSecurityInfo::get_Count Returns the number of GPMPermission objects in the collection.
IGPMSecurityInfo::get_Item Given an index, returns a GPMPermission object from the collection.
IGPMSecurityInfo::Remove Removes the permission specified in a given GPMPermission object from the GPMSecurityInfo collection.
IGPMSecurityInfo::RemoveTrustee Removes all policy-related permissions for the specified trustee. A trustee is a user, computer, or security group that can be granted permissions on a GPO, SOM, or WMI filter.

Remarks

The interface divides the policy-related permissions into categories. The following table lists the categories, permissions included in the categories, and the object to which they can be applied.

Securable object	Permission category	Permission level
Site	GPO linking	permSOMLink
OU	GPO linking	permSOMLink
	RSoP logging	permSOMLogging
	RSoP planning	permSOMPlanning
Domain	GPO linking	permSOMLink
	Creating GPOs	permSOMGPOCreate
	RSoP logging	permSOMLogging
	RSoP planning	permSOMPlanning
	Creating WMI filters	permSOMWMICreate
		permSOMWMIFullControl
WMI filter	Editing WMI filters	permWMIFilterEdit
	Full control of all WMI filters	permWMIFilterFullControl
	Custom control of WMI filters	permWMIFilterCustom
GPO	Security filtering	permGPOApply
	Delegation	permGPORead
		permGPOEdit
		permGPOEditSecurityAndDelete
		permGPOCustom

 

The GPMSecurityInfo collection represents a collection of GPMPermission objects for a particular SOM, GPO, or WMI filter. Note however, that although the GPMSecurityInfo object is a collection object, it is not a typical collection object. This is because no action occurs if the Add method attempts to add a GPMPermission object for a trustee and the permission is below the level of an existing permission for that trustee. For more information, see the Add method.

For more information about policy-related permissions, see IGPM::CreatePermission.

Requirements

Requirement	Value
Minimum supported client	Windows Vista
Minimum supported server	Windows Server 2008
Target Platform	Windows
Header	gpmgmt.h

See also

IDispatch

IGPMPermission

IGPMTrustee