ADS_ACETYPE_ENUM enumeration (iads.h)

The ADS_ACETYPE_ENUM enumeration is used to specify the type of an access-control entry for Active Directory objects. The IADsAccessControlEntry.AceType property contains one of these values for an Active Directory object.

For more information and possible values for file, file share and registry objects, see the AceType member of the ACE_HEADER structure.

Syntax

typedef enum __MIDL___MIDL_itf_ads_0001_0048_0002 {
  ADS_ACETYPE_ACCESS_ALLOWED = 0,
  ADS_ACETYPE_ACCESS_DENIED = 0x1,
  ADS_ACETYPE_SYSTEM_AUDIT = 0x2,
  ADS_ACETYPE_ACCESS_ALLOWED_OBJECT = 0x5,
  ADS_ACETYPE_ACCESS_DENIED_OBJECT = 0x6,
  ADS_ACETYPE_SYSTEM_AUDIT_OBJECT = 0x7,
  ADS_ACETYPE_SYSTEM_ALARM_OBJECT = 0x8,
  ADS_ACETYPE_ACCESS_ALLOWED_CALLBACK = 0x9,
  ADS_ACETYPE_ACCESS_DENIED_CALLBACK = 0xa,
  ADS_ACETYPE_ACCESS_ALLOWED_CALLBACK_OBJECT = 0xb,
  ADS_ACETYPE_ACCESS_DENIED_CALLBACK_OBJECT = 0xc,
  ADS_ACETYPE_SYSTEM_AUDIT_CALLBACK = 0xd,
  ADS_ACETYPE_SYSTEM_ALARM_CALLBACK = 0xe,
  ADS_ACETYPE_SYSTEM_AUDIT_CALLBACK_OBJECT = 0xf,
  ADS_ACETYPE_SYSTEM_ALARM_CALLBACK_OBJECT = 0x10
} ADS_ACETYPE_ENUM;

Constants

ADS_ACETYPE_ACCESS_ALLOWED Value: 0 The ACE is of the standard ACCESS ALLOWED type, where the ObjectType and InheritedObjectType fields are NULL.
ADS_ACETYPE_ACCESS_DENIED Value: 0x1 The ACE is of the standard system-audit type, where the ObjectType and InheritedObjectType fields are NULL.
ADS_ACETYPE_SYSTEM_AUDIT Value: 0x2 The ACE is of the standard system type, where the ObjectType and InheritedObjectType fields are NULL.
ADS_ACETYPE_ACCESS_ALLOWED_OBJECT Value: 0x5 The ACE grants access to an object or a subobject of the object, such as a property set or property. ObjectType or InheritedObjectType or both contain a GUID that identifies a property set, property, extended right, or type of child object.
ADS_ACETYPE_ACCESS_DENIED_OBJECT Value: 0x6 The ACE denies access to an object or a subobject of the object, such as a property set or property. ObjectType or InheritedObjectType or both contain a GUID that identifies a property set, property, extended right, or type of child object.
ADS_ACETYPE_SYSTEM_AUDIT_OBJECT Value: 0x7 The ACE audits access to an object or a subobject of the object, such as a property set or property. ObjectType or InheritedObjectType or both contain a GUID that identifies a property set, property, extended right, or type of child object.
ADS_ACETYPE_SYSTEM_ALARM_OBJECT Value: 0x8 Not used.
ADS_ACETYPE_ACCESS_ALLOWED_CALLBACK Value: 0x9 Same functionality as ADS_ACETYPE_ACCESS_ALLOWED, but used with applications that use Authz to verify ACEs.
ADS_ACETYPE_ACCESS_DENIED_CALLBACK Value: 0xa Same functionality as ADS_ACETYPE_ACCESS_DENIED, but used with applications that use Authz to verify ACEs.
ADS_ACETYPE_ACCESS_ALLOWED_CALLBACK_OBJECT Value: 0xb Same functionality as ADS_ACETYPE_ACCESS_ALLOWED_OBJECT, but used with applications that use Authz to verify ACEs.
ADS_ACETYPE_ACCESS_DENIED_CALLBACK_OBJECT Value: 0xc Same functionality as ADS_ACETYPE_ACCESS_DENIED_OBJECT, but used with applications that use Authz to check ACEs.
ADS_ACETYPE_SYSTEM_AUDIT_CALLBACK Value: 0xd Same functionality as ADS_ACETYPE_SYSTEM_AUDIT, but used with applications that use Authz to check ACEs.
ADS_ACETYPE_SYSTEM_ALARM_CALLBACK Value: 0xe Not used.
ADS_ACETYPE_SYSTEM_AUDIT_CALLBACK_OBJECT Value: 0xf Same functionality as ADS_ACETYPE_SYSTEM_AUDIT_OBJECT, but used with applications that use Authz to verify ACEs.
ADS_ACETYPE_SYSTEM_ALARM_CALLBACK_OBJECT Value: 0x10 Not used.

Remarks

A standard ACE is one defined and used in a Windows security descriptor. Windows enables the ACE to be applied to objects and properties identified by GUIDs.

Use the IADsAccessControlEntry property method to determine the ACE type.

Note  Because Visual Basic Scripting Edition (VBScript) cannot read data from a type library, VBScript applications cannot recognize symbolic constants as defined above. Use the numeric constants instead to set the appropriate flags in VBScript applications. To use the symbolic constants as a good programming practice, write explicit declarations of such constants, as done here, in VBScript applications.

 

Requirements

Requirement	Value
Minimum supported client	Windows Vista
Minimum supported server	Windows Server 2008
Header	iads.h

See also

ADSI Enumerations

IADsAccessControlEntry

IADsAccessControlEntry.AceType