SetSecurityDescriptorGroup
The SetSecurityDescriptorGroup
function sets the primary group information of an absolute-format security
descriptor, replacing any primary group information already present in the
security descriptor.
BOOL SetSecurityDescriptorGroup(
|
PSECURITY_DESCRIPTOR pSecurityDescriptor, |
// address of
security descriptor |
|
PSID pGroup, |
// address of SID
for group |
|
BOOL bGroupDefaulted |
// flag for default |
|
); |
|
Parameters
pSecurityDescriptor
Points to the
SECURITY_DESCRIPTOR
structure whose primary group is set by this function. The function replaces
any existing primary group with the new primary group.
pGroup
Points to a SID structure the function sets
as the security descriptor s new primary group. The SID structure is
referenced by, not copied into, the security descriptor. If this parameter is
NULL, the function clears the security descriptor s primary group information.
This marks the security descriptor as having no primary group.
bGroupDefaulted
Specifies a
flag indicating whether the primary group information was derived from a
default mechanism. If this flag is TRUE, it is default information, and the
function stores this value as the SE_GROUP_DEFAULTED flag in the SECURITY_DESCRIPTOR_CONTROL structure. If this
parameter is zero, the SE_GROUP_DEFAULTED flag is cleared.
Return Values
If the
function succeeds, the return value is nonzero.
If the
function fails, the return value is zero. To get extended error information,
call GetLastError.
See Also