A | B | C |  D | E | F |  G | H | I |  J | K | L |  M | N | O |  P | Q | R |  S | T | U |  V | W | X |  Y | Z


The AddAccessDeniedAce function adds an access-denied ACE to an ACL. The access is denied to a specified SID. To control whether the new ACE can be inherited by child objects, use the AddAccessDeniedAceEx function.

Declare Function AddAccessDeniedAce Lib "advapi32.dll" (pAcl As Byte, ByVal dwAceRevision As Long, ByVal AccessMask As Long, pSid As Byte) As Long

Operating Systems Supported
Requires Windows NT 3.1 or later; Win9x/ME: Not supported


Parameter Information
- pAcl
[in/out] Pointer to an ACL structure. This function adds an access-denied ACE to the end of this ACL. The ACE is in the form of an ACCESS_DENIED_ACE structure.

- dwAceRevision
[in] Specifies the revision level of the ACL being modified.
Windows NT 4.0 and earlier: This value must be ACL_REVISION.
Windows 2000: This value can be ACL_REVISION or ACL_REVISION_DS. Use ACL_REVISION_DS if the ACL contains object-specific ACEs.

- AccessMask
[in] Specifies the mask of access rights being denied to the specified SID.

- pSid
[in] Pointer to the SID structure representing the user, group, or logon account being denied access.

Return Values
If the function succeeds, the return value is nonzero.

If the function fails, the return value is zero. To get extended error information, call GetLastError.

Last update: 07 April 2006