Edit

IAzScope::AddPolicyAdministratorName method (azroles.h)

  • Article

The AddPolicyAdministratorName method adds the specified account name to the list of principals that act as policy administrators.

Syntax

HRESULT AddPolicyAdministratorName(
  [in]           BSTR    bstrAdmin,
  [in, optional] VARIANT varReserved
);

Parameters

[in] bstrAdmin

The account name to add to the list of policy administrators. The account name can be in either user principal name (UPN) format (for example, someone@example.com) or in the ExampleDomain\UserName format. If the domain is not in the ExampleDomain\UserName format, the LookupAccountName function is called to retrieve the domain.

[in, optional] varReserved

Reserved for future use.

Return value

If the method succeeds, it will return S_OK. Any other HRESULT value indicates that the operation failed.

Remarks

Policy administrators for an object can perform the following tasks:

  • Read the object
  • Write attributes to the object
  • Read attributes of child objects of the object
  • Write attributes to child objects of the object
  • Delete the object
  • Delete child objects of the object
  • Create child objects of the object

To view the list of policy administrators in account name format, use the PolicyAdministratorsName property.

You must call the Submit method to persist any changes made by this method.

Requirements

Requirement Value
Minimum supported client Windows Vista [desktop apps only]
Minimum supported server Windows Server 2003 [desktop apps only]
Target Platform Windows
Header azroles.h
Library Azroles.lib
DLL Azroles.dll
Redistributable Windows Server 2003 Administration Tools Pack on Windows XP

See also

LookupAccountName

PolicyAdministratorsName

Submit