Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
The IGPMSecurityInfo interface defines the methods of the GPMSecurityInfo collection. This collection represents a set of policy-related permissions that can be set on a particular object, such as a scope of management (SOM), a GPO, or a WMI filter.
Inheritance
The IGPMSecurityInfo interface inherits from the IDispatch interface. IGPMSecurityInfo also has these types of members:
Methods
The IGPMSecurityInfo interface has these methods.
| IGPMSecurityInfo::Add Adds the permission specified in a GPMPermission object to the GPMSecurityInfo collection. You can add a permission that is above the level of existing permissions. For more information about restrictions that apply, see the following Remarks section. |
| IGPMSecurityInfo::get__NewEnum Retrieves an enumerator for the collection. (IGPMSecurityInfo.get__NewEnum) |
| IGPMSecurityInfo::get_Count Returns the number of GPMPermission objects in the collection. |
| IGPMSecurityInfo::get_Item Given an index, returns a GPMPermission object from the collection. |
| IGPMSecurityInfo::Remove Removes the permission specified in a given GPMPermission object from the GPMSecurityInfo collection. |
| IGPMSecurityInfo::RemoveTrustee Removes all policy-related permissions for the specified trustee. A trustee is a user, computer, or security group that can be granted permissions on a GPO, SOM, or WMI filter. |
Remarks
The interface divides the policy-related permissions into categories. The following table lists the categories, permissions included in the categories, and the object to which they can be applied.
| Securable object | Permission category | Permission level |
|---|---|---|
| Site | GPO linking | permSOMLink |
| OU | GPO linking | permSOMLink |
| RSoP logging | permSOMLogging | |
| RSoP planning | permSOMPlanning | |
| Domain | GPO linking | permSOMLink |
| Creating GPOs | permSOMGPOCreate | |
| RSoP logging | permSOMLogging | |
| RSoP planning | permSOMPlanning | |
| Creating WMI filters | permSOMWMICreate | |
| permSOMWMIFullControl | ||
| WMI filter | Editing WMI filters | permWMIFilterEdit |
| Full control of all WMI filters | permWMIFilterFullControl | |
| Custom control of WMI filters | permWMIFilterCustom | |
| GPO | Security filtering | permGPOApply |
| Delegation | permGPORead | |
| permGPOEdit | ||
| permGPOEditSecurityAndDelete | ||
| permGPOCustom |
The GPMSecurityInfo collection represents a collection of GPMPermission objects for a particular SOM, GPO, or WMI filter. Note however, that although the GPMSecurityInfo object is a collection object, it is not a typical collection object. This is because no action occurs if the Add method attempts to add a GPMPermission object for a trustee and the permission is below the level of an existing permission for that trustee. For more information, see the Add method.
For more information about policy-related permissions, see IGPM::CreatePermission.
Requirements
| Requirement | Value |
|---|---|
| Minimum supported client | Windows Vista |
| Minimum supported server | Windows Server 2008 |
| Target Platform | Windows |
| Header | gpmgmt.h |