Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Generates an ETW event for the specified file, with additional parameter options.
Syntax
HRESULT WINAPI DlpAuditOperationEnforcementEventEx2(_In_z_ LPCWSTR source, _In_z_ LPCWSTR target, _In_z_ LPCWSTR actionType, _In_ DlpEnforcementLevel enforcmentLevel, _In_ BOOLEAN userBypass, _In_ DlpTraceInfo* traceInfo, _In_opt_z_ LPCWSTR businessJustification, _In_opt_z_ LPCWSTR printerOutputFileName, _In_opt_z_ LPCWSTR printerName, _In_opt_z_ LPCWSTR printerJobName);
Parameters
source [in]: A fully qualified Win32 file path for the file to be analyzed.
target [in]: The target to trace. When investigating some operations like Print or Copy to Keyboard, this property can be NULL.
actionType [in]: The DlpAction type to trace.
enforcementlevel [in]: The enforcement level of the file specified.
userbypass [in]: Indicates the user decision if the DlpEnforcementLevel is set to Warn. A value of TRUE indicates that the operation is allowed, a value of FALSE disallows the operation.
traceInfo [in]: A reference to a Trace structure. On successful completion, this structure contains the Policy version used for evaluation and the PolicyRuleID assigned to the file. This value can be NULL.
businessJustification [in]: A business justification for the generated enforcement event.
printerOutputFileName [in]: The printer output file name. Only necessary when the actionType parameter is set to DlpWebSiteActionTypePrint.
printerName [in]: The printer name. Only necessary when the actionType parameter is set to DlpWebSiteActionTypePrint.
printerJobName [in]: The printer job name. Only necessary when the actionType parameter is set to DlpWebSiteActionTypePrint.
Return value
Returns an HRESULT including, but not limited to, the following values.
HRESULT |
Description |
|---|---|
S_OK |
The function completed successfully. |
FAILED |
An unexpected error prevented the function from completing. |
Remarks
This function can be called from multiple threads.
Requirements
| Requirement | Value |
|---|---|
| Minimum supported client |
Windows 11, version 22H2 (10.0; Build 22621) |
| DLL |
EndpointDlp.dll |