Edit

Share via

IAzAuthorizationStore::DeletePolicyAdministratorName method (azroles.h)

  • Article

The DeletePolicyAdministratorName method removes the specified account name from the list of principals that act as policy administrators.

Syntax

HRESULT DeletePolicyAdministratorName(
  [in]           BSTR    bstrAdmin,
  [in, optional] VARIANT varReserved
);

Parameters

[in] bstrAdmin

The account name to remove from the list of policy administrators. The account name must be in user principal name (UPN) format (for example, "someone@example.com"). The LookupAccountName function is called to retrieve the domain.

[in, optional] varReserved

Reserved for future use.

Return value

If the method succeeds, the method returns S_OK.

Any other HRESULT value indicates that the operation failed.

Remarks

Policy administrators for an object can perform the following tasks:

  • Read the object
  • Write attributes to the object
  • Read attributes of child objects of the object
  • Write attributes to child objects of the object
  • Delete the object
  • Delete child objects of the object
  • Create child objects of the object
To view the list of policy administrators in account name format, use the PolicyAdministratorsName property.

Requirements

Requirement Value
Minimum supported client Windows Vista [desktop apps only]
Minimum supported server Windows Server 2003 [desktop apps only]
Target Platform Windows
Header azroles.h
Library Azroles.lib
DLL Azroles.dll
Redistributable Windows Server 2003 Administration Tools Pack on Windows XP