2OO1, 27 February
NtPrivilegeObjectAuditAlarm
NtPrivilegeObjectAuditAlarm
NTSYSAPI
NTSTATUS
NTAPI
NtPrivilegeObjectAuditAlarm(
IN PUNICODE_STRING SubsystemName OPTIONAL,
IN HANDLE ObjectHandle OPTIONAL,
IN HANDLE ClientToken,
IN ULONG DesiredAccess,
IN PPRIVILEGE_SET ClientPrivileges,
IN BOOLEAN AccessGranted );
Function NtPrivilegeObjectAuditAlarm doesn't work, as
the most of other auditing functions...
- ObjectHandle This can be any
value.
- ClientToken HANDLE to Token
Object opened with TOKEN_QUERY access.
- ClientPrivileges Pointer to PRIVILEGE_SET structure filled with valid
data.
- AccessGranted - ???
- Documented by:
- Tomasz Nowak
Requirements:
- Library: ntdll.lib
- Privilege: SE_AUDIT_PRIVILEGE
See also:
-
NtAccessCheckAndAuditAlarm
-
NtOpenObjectAuditAlarm
- NtPrivilegedServiceAuditAlarm
- PRIVILEGE_SET