Edit

IAzScope::DeletePolicyAdministratorName method (azroles.h)

  • Article

The DeletePolicyAdministratorName method removes the specified account name from the list of principals that act as policy administrators.

Syntax

HRESULT DeletePolicyAdministratorName(
  [in]           BSTR    bstrAdmin,
  [in, optional] VARIANT varReserved
);

Parameters

[in] bstrAdmin

Account name to remove from the list of policy administrators. The account name can be in either user principal name (UPN) format (for example, someone@example.com) or in the ExampleDomain\UserName format. If the domain is not in the ExampleDomain\UserName format, the LookupAccountName function is called to retrieve the domain.

[in, optional] varReserved

Reserved for future use.

Return value

If the method succeeds, it will return S_OK. Any other HRESULT value indicates that the operation failed.

Remarks

Policy administrators for an object can perform the following tasks:

  • Read the object
  • Write attributes to the object
  • Read attributes of child objects of the object
  • Write attributes to child objects of the object
  • Delete the object
  • Delete child objects of the object
  • Create child objects of the object

To view the list of policy administrators in account name format, use the PolicyAdministratorsName property.

Requirements

Requirement Value
Minimum supported client Windows Vista [desktop apps only]
Minimum supported server Windows Server 2003 [desktop apps only]
Target Platform Windows
Header azroles.h
Library Azroles.lib
DLL Azroles.dll
Redistributable Windows Server 2003 Administration Tools Pack on Windows XP

See also

LookupAccountName

PolicyAdministratorsName