IAzAuthorizationStore::DeletePolicyAdministrator method (azroles.h)

The DeletePolicyAdministrator method removes the specified security identifier (SID) in text form from the list of principals that act as policy administrators.

Syntax

HRESULT DeletePolicyAdministrator(
  [in]           BSTR    bstrAdmin,
  [in, optional] VARIANT varReserved
);

Parameters

[in] bstrAdmin

Text form of the SID to remove from the list of policy administrators.

[in, optional] varReserved

Reserved for future use.

Return value

If the method succeeds, it will return S_OK. Any other HRESULT value indicates that the operation failed.

Remarks

Policy administrators for an object can perform the following tasks:

  • Read the object
  • Write attributes to the object
  • Read attributes of child objects of the object
  • Write attributes to child objects of the object
  • Delete the object
  • Delete child objects of the object
  • Create child objects of the object

To view the list of policy administrators, use the PolicyAdministrators property.

Requirements

Requirement Value
Minimum supported client Windows Vista [desktop apps only]
Minimum supported server Windows Server 2003 [desktop apps only]
Target Platform Windows
Header azroles.h
Library Azroles.lib
DLL Azroles.dll
Redistributable Windows Server 2003 Administration Tools Pack on Windows XP

See also

PolicyAdministrators