Enumerator

Meaning

SE_FILE_OBJECT

Indicates a file or directory. The name string that identifies a file or directory object can be

    A relative path, such as  abc.dat  or  ..\abc.dat 

    An absolute path, such as  \abc.dat ,  c:\dir1\abc.dat , or  g:\remotedir\abc.dat 

    A UNC name, such as  \\machinename\sharename\abc.dat .

    A local file system root, such as  \\\\.\\c: . Security set on a file system root does not persist when the system is restarted.

SE_SERVICE

Indicates a Windows NT service. A service object can be a local service, such as  servicename ; or a remote service, such as  \\machinename\servicename .

SE_PRINTER

Indicates a printer. A printer object can be a local printer, such as  printername ; or a remote printer, such as  \\machinename\printername .

SE_REGISTRY_KEY

Indicates a registry key. A registry key object can be in the local registry, such as  CLASSES_ROOT\somepath ; or in a remote registry, such as  \\machinename\CLASSES_ROOT\somepath .

The names of registry keys must use the following literal strings to identify the predefined registry keys:  CLASSES_ROOT ,  CURRENT_USER ,  MACHINE , and  USERS .

SE_LMSHARE

Indicates a Windows NT network share. A share object can be local, such as  sharename ; or remote, such as  \\machinename\sharename .

SE_KERNEL_OBJECT

Indicates a local kernel object, which can be any of the following: a process, thread, semaphore, event, mutex, file mapping, or waitable timer. Only some kernel objects can be identified by name.

Note that the GetSecurityInfo, SetSecurityInfo, GetNamedSecurityInfo, and SetNamedSecurityInfo functions do not work with the following types of kernel objects: access token, console screen buffer, mailslot, named pipe, and anonymous pipe.

SE_WINDOW_OBJECT

Indicates a window station or desktop object on the local computer.