IGPMGPO::SetSecurityDescriptor method (gpmgmt.h)

Sets the security descriptor for the GPO. The method replaces the existing security descriptor.

Syntax

HRESULT SetSecurityDescriptor(
  [in] long      lFlags,
  [in] IDispatch *pSD
);

Parameters

[in] lFlags

Specifies a set of bit flags. Use this parameter to specify the parts of the security descriptor to set.

OWNER_SECURITY_INFORMATION (1)

Owner identifier of the object.

GROUP_SECURITY_INFORMATION (2)

Primary group identifier.

DACL_SECURITY_INFORMATION (4)

Discretionary ACL of the object.

SACL_SECURITY_INFORMATION (8)

System ACL of the object.

[in] pSD

The security descriptor to set.

Return value

JScript

Returns S_OK if successful. Returns a failure code if an error occurs.

VB

Returns S_OK if successful. Returns a failure code if an error occurs.

Remarks

For more information about ACLs and the security model for controlling access to Windows objects, see the Access Control topic .

Requirements

Requirement	Value
Minimum supported client	Windows Vista
Minimum supported server	Windows Server 2008
Target Platform	Windows
Header	gpmgmt.h
DLL	Gpmgmt.dll

See also

Access Control

IGPMGPO