ObjectDeleteAuditAlarmW function (securitybaseapi.h)

The ObjectDeleteAuditAlarm function generates audit messages when an object is deleted. Alarms are not currently supported.

Syntax

BOOL ObjectDeleteAuditAlarmW(
  [in] LPCWSTR SubsystemName,
  [in] LPVOID  HandleId,
  [in] BOOL    GenerateOnClose
);

Parameters

[in] SubsystemName

A pointer to a null-terminated string specifying the name of the subsystem calling the function. This string appears in any audit message that the function generates.

[in] HandleId

Specifies a unique value representing the client's handle to the object. This must be the same value that was passed to the AccessCheckAndAuditAlarm or ObjectOpenAuditAlarm function.

[in] GenerateOnClose

Specifies a flag set by a call to the AccessCheckAndAuditAlarm or ObjectOpenAuditAlarm function when the object handle is created.

Return value

If the function succeeds, the return value is a nonzero value.

If the function fails, the return value is zero. To get extended error information, call GetLastError.

Remarks

The ObjectDeleteAuditAlarm function requires the calling application to have the SE_AUDIT_NAME privilege enabled. The test for this privilege is always performed against the primary token of the calling process, allowing the calling process to impersonate a client.

Requirements

See also

AccessCheck
AccessCheckAndAuditAlarm
AreAllAccessesGranted
AreAnyAccessesGranted
Client/Server Access Control
Client/Server Access Control Functions
MapGenericMask
ObjectCloseAuditAlarm
ObjectOpenAuditAlarm
ObjectPrivilegeAuditAlarm
PrivilegeCheck
PrivilegedServiceAuditAlarm