Location: Symbol Reference > Classes > TJwSecurityToken Class > TJwSecurityToken Methods > TJwSecurityToken.PrivilegedServiceAuditAlarm Method
JWSCL Documentation
ContentsIndexHome
PreviousUpNext
TJwSecurityToken.PrivilegedServiceAuditAlarm Method
Pascal
class procedure PrivilegedServiceAuditAlarm(SubsystemName: TJwString; ServiceName: TJwString; ClientToken: TJwSecurityToken; Privileges: TJwPrivilegeSet; AccessGranted: boolean);
Parameters 
Description 
ClientToken: TJwSecurityToken 
is the token to be used in audit log. 

PrivilegedServiceAuditAlarm function generates an audit message in the security event log. For a detailed information see MSDN : http://msdn2.microsoft.com/en-gb/library/aa379305.aspx 

If you want to enable audit functions the calling process (not thread token!) needs the SeAuditPrivilege privilege. Per default only services have this privilege. However it can be enabled in group policy editor : "gpedit.msc" manager (under xp) Computer configuration -> Windows settings -> security settings -> local policies -> audit policy enable (success/failure) policy : audit privilege The parameter AccessGranted is linked with the type of policy - success or failiure. (http://www.nemesisblue.info/images%5Cgpedit1.gif) 

The audit event can be seen in the event viewer in security leaf. 

 

Exceptions 
Description 
will be raised if the process token does not have the privilege : SE_AUDIT_NAME 
will be raised if the winapi call to PrivilegedServiceAuditAlarm failed. 
will be raised if the parameter ClientToken is nil 
Copyright (c) 2010. All rights reserved.
This help was created by Doc-O-Matic sponsored by toolsfactory software inc.
What do you think about this topic? Send feedback!