2.2.1.10 SE_GROUP Attributes
These values are attributes of a security group membership and can be combined by using the bitwise OR operation. They are used by an access check mechanism to specify whether the membership is to be used in an access check decision. The values can be set by using the SamrSetMemberAttributesOfGroup method.
|
Constant/value |
Description |
|---|---|
|
SE_GROUP_MANDATORY 0x00000001 |
The SID cannot have the SE_GROUP_ENABLED attribute removed. |
|
SE_GROUP_ENABLED_BY_DEFAULT 0x00000002 |
The SID is enabled by default (rather than being added by an application). |
|
SE_GROUP_ENABLED 0x00000004 |
The SID is enabled for access checks. |