Auditing Access To Private Objects
A protected server can use the following functions to generate audit reports in the security event log.
Function | Description |
---|---|
AccessCheckAndAuditAlarm | Same as the AccessCheck function except that it can generate audit messages for failed or successful access attempts. |
AccessCheckByTypeAndAuditAlarm | Same as the AccessCheckByType function except that it can generate audit messages for failed or successful access attempts. |
AccessCheckByTypeResultListAndAuditAlarm | Same as the AccessCheckByTypeResultList function except that it can generate audit messages for failed or successful access attempts. |
AccessCheckByTypeResultListAndAuditAlarmByHandle | Same as the AccessCheckByTypeResultListAndAuditAlarm function except that it allows the calling thread to perform the access check before impersonating the client. |
ObjectCloseAuditAlarm | Generates an audit message to indicate that a client tried to close a private object. |
ObjectDeleteAuditAlarm | Generates an audit message to indicate that a client tried to delete a private object. |
ObjectOpenAuditAlarm | Generates an audit message to indicate that a client tried to open or create a private object. |
ObjectPrivilegeAuditAlarm | Generates an audit message to indicate that a client tried to use a specified set of privileges in conjunction with an attempt to access a private object. |
PrivilegedServiceAuditAlarm | Generates an audit message to indicate that a client tried to use a specified set of privileges. |