AuthzRegisterSecurityEventSource function (authz.h)

The AuthzRegisterSecurityEventSource function registers a security event source with the Local Security Authority (LSA).


AUTHZAPI BOOL AuthzRegisterSecurityEventSource(
  [in]  DWORD                                 dwFlags,
  [in]  PCWSTR                                szEventSourceName,


[in] dwFlags

This parameter is reserved for future use. Set this parameter to zero.

[in] szEventSourceName

A pointer to the name of the security event source to register.

[out] phEventProvider

A pointer to a handle to the registered security event source.

Return value

If the function succeeds, the function returns TRUE.

If the function fails, it returns FALSE. For extended error information, call GetLastError.


This function validates the szEventSourceName parameter and sets up the appropriate structures and RPC connections to log events with that source name. The validation is handled by an underlying call to an LSA API.

The LSA API verifies the following:

  • The caller has the SeAuditPrivilege access right.
  • The event source is not already in use.
  • The event source is registered.
  • The calling application matches the executable image path in the event source registration, if one exists.


Minimum supported client None supported
Minimum supported server Windows Server 2003 [desktop apps only]
Target Platform Windows
Header authz.h
Library Authz.lib
DLL Authz.dll
Redistributable Windows Server 2003 Administration Tools Pack on Windows XP

See also