IGPMGPO::SetSecurityDescriptor method (gpmgmt.h)
Sets the security descriptor for the GPO. The method replaces the existing security descriptor.
Syntax
HRESULT SetSecurityDescriptor(
[in] long lFlags,
[in] IDispatch *pSD
);
Parameters
[in] lFlags
Specifies a set of bit flags. Use this parameter to specify the parts of the security descriptor to set.
OWNER_SECURITY_INFORMATION (1)
Owner identifier of the object.
GROUP_SECURITY_INFORMATION (2)
Primary group identifier.
DACL_SECURITY_INFORMATION (4)
Discretionary ACL of the object.
SACL_SECURITY_INFORMATION (8)
System ACL of the object.
[in] pSD
The security descriptor to set.
Return value
JScript
Returns S_OK if successful. Returns a failure code if an error occurs.VB
Returns S_OK if successful. Returns a failure code if an error occurs.Remarks
For more information about ACLs and the security model for controlling access to Windows objects, see the Access Control topic .
Requirements
| Requirement | Value |
|---|---|
| Minimum supported client | Windows Vista |
| Minimum supported server | Windows Server 2008 |
| Target Platform | Windows |
| Header | gpmgmt.h |
| DLL | Gpmgmt.dll |