AuditEnumerateSubCategories function (ntsecapi.h)

The AuditEnumerateSubCategories function enumerates the available audit-policy subcategories.


BOOLEAN AuditEnumerateSubCategories(
  [in]  const GUID *pAuditCategoryGuid,
  [in]  BOOLEAN    bRetrieveAllSubCategories,
  [out] GUID       **ppAuditSubCategoriesArray,
  [out] PULONG     pdwCountReturned


[in] pAuditCategoryGuid

The GUID of an audit-policy category for which subcategories are enumerated. If the value of the bRetrieveAllSubCategories parameter is TRUE, this parameter is ignored.

[in] bRetrieveAllSubCategories

TRUE to enumerate all audit-policy subcategories; FALSE to enumerate only the subcategories of the audit-policy category specified by the pAuditCategoryGuid parameter.

[out] ppAuditSubCategoriesArray

A pointer to a single buffer that contains both an array of pointers to GUID structures and the structures themselves. The GUID structures specify the audit-policy subcategories available on the computer.

When you have finished using this buffer, free it by calling the AuditFree function.

[out] pdwCountReturned

A pointer to the number of audit-policy subcategories returned in the ppAuditSubCategoriesArray array.

Return value

If the function succeeds, it returns TRUE.

If the function fails, it returns FALSE. To get extended error information, call GetLastError.


Requirement Value
Minimum supported client Windows Vista [desktop apps only]
Minimum supported server Windows Server 2008 [desktop apps only]
Target Platform Windows
Header ntsecapi.h
Library Advapi32.lib
DLL Advapi32.dll

See also