Skip to content

ADS_ACETYPE_ENUM

The ADS_ACETYPE_ENUM enumeration is used to specify the type of an access-control entry for Active Directory objects. The IADsAccessControlEntry::AceType property contains one of these values for an Active Directory object.

Syntax

enum ADS_ACETYPE_ENUM
{
    ADS_ACETYPE_ACCESS_ALLOWED                   = 0,   //0x0
    ADS_ACETYPE_ACCESS_DENIED                    = 1,   //0x1
    ADS_ACETYPE_SYSTEM_AUDIT                     = 2,   //0x2
    ADS_ACETYPE_ACCESS_ALLOWED_OBJECT            = 5,   //0x5
    ADS_ACETYPE_ACCESS_DENIED_OBJECT             = 6,   //0x6
    ADS_ACETYPE_SYSTEM_AUDIT_OBJECT              = 7,   //0x7
    ADS_ACETYPE_SYSTEM_ALARM_OBJECT              = 8,   //0x8
    ADS_ACETYPE_ACCESS_ALLOWED_CALLBACK          = 9,   //0x9
    ADS_ACETYPE_ACCESS_DENIED_CALLBACK           = 10,  //0xA
    ADS_ACETYPE_ACCESS_ALLOWED_CALLBACK_OBJECT   = 11,  //0xB
    ADS_ACETYPE_ACCESS_DENIED_CALLBACK_OBJECT    = 12,  //0xC
    ADS_ACETYPE_SYSTEM_AUDIT_CALLBACK            = 13,  //0xD
    ADS_ACETYPE_SYSTEM_ALARM_CALLBACK            = 14,  //0xE
    ADS_ACETYPE_SYSTEM_AUDIT_CALLBACK_OBJECT     = 15,  //0xF
    ADS_ACETYPE_SYSTEM_ALARM_CALLBACK_OBJECT     = 16   //0x10
}

Constants

  • Flag

  • Description

  • ADS_ACETYPE_ACCESS_ALLOWED

  • The ACE is of the standard ACCESS ALLOWED type, where the ObjectType and InheritedObjectType fields are NULL.

  • ADS_ACETYPE_ACCESS_DENIED

  • The ACE is of the standard system-audit type, where the ObjectType and InheritedObjectType fields are NULL.

  • ADS_ACETYPE_SYSTEM_AUDIT

  • The ACE is of the standard system type, where the ObjectType and InheritedObjectType fields are NULL.

  • ADS_ACETYPE_ACCESS_ALLOWED_OBJECT

  • The ACE grants access to an object or a subobject of the object, such as a property set or property. ObjectType or InheritedObjectType or both contain a GUID that identifies a property set, property, extended right, or type of child object.

  • ADS_ACETYPE_ACCESS_DENIED_OBJECT

  • The ACE denies access to an object or a subobject of the object, such as a property set or property. ObjectType or InheritedObjectType or both contain a GUID that identifies a property set, property, extended right, or type of child object.

  • ADS_ACETYPE_SYSTEM_AUDIT_OBJECT

  • The ACE audits access to an object or a subobject of the object, such as a property set or property. ObjectType or InheritedObjectType or both contain a GUID that identifies a property set, property, extended right, or type of child object.

  • ADS_ACETYPE_SYSTEM_ALARM_OBJECT

  • Not used.

  • ADS_ACETYPE_ACCESS_ALLOWED_CALLBACK

  • Same functionality as ADS_ACETYPE_ACCESS_ALLOWED, but used with applications that use Authz to verify ACEs.

  • ADS_ACETYPE_ACCESS_DENIED_CALLBACK

  • Same functionality as ADS_ACETYPE_ACCESS_DENIED, but used with applications that use Authz to verify ACEs.

  • ADS_ACETYPE_ACCESS_ALLOWED_CALLBACK_OBJECT

  • Same functionality as ADS_ACETYPE_ACCESS_ALLOWED_CALLBACK_OBJECT, but used with applications that use Authz to verify ACEs.

  • ADS_ACETYPE_ACCESS_DENIED_CALLBACK_OBJECT

  • Same functionality as ADS_ACETYPE_ACCESS_DENIED_CALLBACK_OBJECT, but used with applications that use Authz to verify ACEs.

  • ADS_ACETYPE_SYSTEM_AUDIT_CALLBACK

  • Same functionality as ADS_ACETYPE_SYSTEM_AUDIT_CALLBACK, but used with applications that use Authz to verify ACEs.

  • ADS_ACETYPE_SYSTEM_ALARM_CALLBACK

  • Not used.

  • ADS_ACETYPE_SYSTEM_AUDIT_CALLBACK_OBJECT

  • Same functionality as ADS_ACETYPE_SYSTEM_AUDIT_CALLBACK_OBJECT, but used with applications that use Authz to verify ACEs.

  • ADS_ACETYPE_SYSTEM_ALARM_CALLBACK_OBJECT

  • Not used.

Requirements

Minimum required version: 2009.1

See also