SE_OBJECT_TYPE

[New - Windows NT]

The SE_OBJECT_TYPE enumeration type contains values that correspond to the types of Win32 objects that support security. The GetSecurityInfo, SetSecurityInfo, GetNamedSecurityInfo, and SetNamedSecurityInfo functions use these values to indicate the type of object.

typedef enum _SE_OBJECT_TYPE

{

SE_UNKNOWN_OBJECT_TYPE = 0,

SE_FILE_OBJECT,

SE_SERVICE,

SE_PRINTER,

SE_REGISTRY_KEY,

SE_LMSHARE,

SE_KERNEL_OBJECT,

SE_WINDOW_OBJECT

} SE_OBJECT_TYPE;

Enumerator Meaning
SE_FILE_OBJECT Indicates a file or directory. The name string that identifies a file or directory object can be

·A relative path, such as "abc.dat" or "..\abc.dat"

·An absolute path, such as "\abc.dat", "c:\dir1\abc.dat", or "g:\remotedir\abc.dat"

·A UNC name, such as "\\machinename\sharename\abc.dat".

·A local file system root, such as "\\\\.\\c:". Security set on a file system root does not persist when the system is restarted.

SE_SERVICE Indicates a Windows NT service. A service object can be a local service, such as "servicename"; or a remote service, such as "\\machinename\servicename".
SE_PRINTER Indicates a printer. A printer object can be a local printer, such as "printername"; or a remote printer, such as "\\machinename\printername".
SE_REGISTRY_KEY Indicates a registry key. A registry key object can be in the local registry, such as "CLASSES_ROOT\somepath"; or in a remote registry, such as "\\machinename\CLASSES_ROOT\somepath".

The names of registry keys must use the following literal strings to identify the predefined registry keys: "CLASSES_ROOT", "CURRENT_USER", "MACHINE", and "USERS".

SE_LMSHARE Indicates a Windows NT network share. A share object can be local, such as "sharename"; or remote, such as "\\machinename\sharename".
SE_KERNEL_OBJECT Indicates a local kernel object, which can be any of the following: a process, thread, semaphore, event, mutex, file mapping, or waitable timer. Only some kernel objects can be identified by name.

Note that the GetSecurityInfo, SetSecurityInfo, GetNamedSecurityInfo, and SetNamedSecurityInfo functions do not work with the following types of kernel objects: access token, console screen buffer, mailslot, named pipe, and anonymous pipe.

SE_WINDOW_OBJECT Indicates a window station or desktop object on the local computer.

See Also

GetSecurityInfo, SetSecurityInfo, GetNamedSecurityInfo, SetNamedSecurityInfo