共用方式為

2.2.4.12 POLICY_AUDIT_FULL_SET_INFO

  • 發行項

The POLICY_AUDIT_FULL_SET_INFO structure contains information to set on the server that is controlling audit log behavior. The following structure corresponds to the PolicyAuditFullSetInformation information class. This information class is not supported.

 typedef struct _POLICY_AUDIT_FULL_SET_INFO {
   unsigned char ShutDownOnFull;
 } POLICY_AUDIT_FULL_SET_INFO,
  *PPOLICY_AUDIT_FULL_SET_INFO;

ShutDownOnFull: A nonzero value means that the system MUST shut down when the event log is full, while zero means that the system MUST NOT shut down when the event log is full.