WbemPrivilegeEnum enumeration (wbemdisp.h)

The WbemPrivilegeEnum constants define privileges. These constants are used with SWbemSecurity to grant the privileges required for some operations. For more information, see Privilege Constants.

The WMI scripting type library, wbemdisp.tlb defines these constants. Microsoft Visual Basic applications can access this library; script languages must use the value of the constant directly, unless they use Windows Script Host (WSH) XML file format. For more information, see Using the WMI Scripting Type Library.

Syntax

typedef enum WbemPrivilegeEnum {
  wbemPrivilegeCreateToken = 1,
  wbemPrivilegePrimaryToken = 2,
  wbemPrivilegeLockMemory = 3,
  wbemPrivilegeIncreaseQuota = 4,
  wbemPrivilegeMachineAccount = 5,
  wbemPrivilegeTcb = 6,
  wbemPrivilegeSecurity = 7,
  wbemPrivilegeTakeOwnership = 8,
  wbemPrivilegeLoadDriver = 9,
  wbemPrivilegeSystemProfile = 10,
  wbemPrivilegeSystemtime = 11,
  wbemPrivilegeProfileSingleProcess = 12,
  wbemPrivilegeIncreaseBasePriority = 13,
  wbemPrivilegeCreatePagefile = 14,
  wbemPrivilegeCreatePermanent = 15,
  wbemPrivilegeBackup = 16,
  wbemPrivilegeRestore = 17,
  wbemPrivilegeShutdown = 18,
  wbemPrivilegeDebug = 19,
  wbemPrivilegeAudit = 20,
  wbemPrivilegeSystemEnvironment = 21,
  wbemPrivilegeChangeNotify = 22,
  wbemPrivilegeRemoteShutdown = 23,
  wbemPrivilegeUndock = 24,
  wbemPrivilegeSyncAgent = 25,
  wbemPrivilegeEnableDelegation = 26,
  wbemPrivilegeManageVolume = 27
} ;

Constants

wbemPrivilegeCreateToken Value: 1 Required to create a primary token.
wbemPrivilegePrimaryToken Value: 2 Required to assign the primary token of a process.
wbemPrivilegeLockMemory Value: 3 Required to lock physical pages in memory.
wbemPrivilegeIncreaseQuota Value: 4 Required to increase the quota assigned to a process.
wbemPrivilegeMachineAccount Value: 5 Required to create a machine account.
wbemPrivilegeTcb Value: 6 Identifies its holder as part of the trusted computer base. Some trusted, protected subsystems are granted this privilege.
wbemPrivilegeSecurity Value: 7 Required to perform a number of security-related functions, such as controlling and viewing audit messages. This privilege identifies its holder as a security operator.
wbemPrivilegeTakeOwnership Value: 8 Required to take ownership of an object without being granted discretionary access. This privilege allows the owner value to be set only to those values that the holder may legitimately assign as the owner of an object.
wbemPrivilegeLoadDriver Value: 9 Required to load or unload a device driver.
wbemPrivilegeSystemProfile Value: 10 Required to gather profiling information for the entire system.
wbemPrivilegeSystemtime Value: 11 Required to modify the system time.
wbemPrivilegeProfileSingleProcess Value: 12 Required to gather profiling information for a single process.
wbemPrivilegeIncreaseBasePriority Value: 13 Required to increase the base priority of a process.
wbemPrivilegeCreatePagefile Value: 14 Required to create a paging file.
wbemPrivilegeCreatePermanent Value: 15 Required to create a permanent object.
wbemPrivilegeBackup Value: 16 Required to perform backup operations.
wbemPrivilegeRestore Value: 17 Required to perform restore operations. This privilege enables you to set any valid user or group security identifier (SID) as the owner of an object.
wbemPrivilegeShutdown Value: 18 Required to shut down a local system.
wbemPrivilegeDebug Value: 19 Required to debug a process.
wbemPrivilegeAudit Value: 20 Required to generate audit-log entries.
wbemPrivilegeSystemEnvironment Value: 21 Required to modify the nonvolatile RAM of systems that use this type of memory to store configuration information.
wbemPrivilegeChangeNotify Value: 22 Required to receive notifications of changes to files or directories. This privilege also causes the system to skip all traversal access checks. It is enabled by default for all users.
wbemPrivilegeRemoteShutdown Value: 23 Required to shut down a system using a network request.
wbemPrivilegeUndock Value: 24 Required to remove a computer from a docking station.
wbemPrivilegeSyncAgent Value: 25 Required to synchronize directory service data.
wbemPrivilegeEnableDelegation Value: 26 Required to enable computer and user accounts to be trusted for delegation.
wbemPrivilegeManageVolume Value: 27 Required to perform volume maintenance tasks.

Requirements

Requirement	Value
Minimum supported client	Windows Vista
Minimum supported server	Windows Server 2008
Header	wbemdisp.h

See also

Privilege Constants

SWbemSecurity.Privileges

Scripting API Constants