Undocumented functions of NTDLL

2OO1, 27 February


Gridstore - NonStop Storage

NtCloseObjectAuditAlarm
NtCloseObjectAuditAlarm

NTSYSAPI 
NTSTATUS
NTAPI

NtCloseObjectAuditAlarm(


  IN PUNICODE_STRING      SubsystemName,
  IN HANDLE               ObjectHandle OPTIONAL,
  IN BOOLEAN              GenerateOnClose );



Function NtCloseObjectAuditAlarm sends alarm to Event Log, section Security. Alarm informs about close user's created object.


  • SubsystemName
    •     This string is sent to Event Log as the first parameter.
  • ObjectHandle
    •     HANDLE to object, or NULL value.
  • GenerateOnClose
    •     If set, event is generated.


    Documented by:
    Tomasz Nowak



    Requirements:
    Library: ntdll.lib
    Privilege: SE_AUDIT_PRIVILEGE


    See also:
    NtAccessCheckAndAuditAlarm
    NtDeleteObjectAuditAlarm
    NtOpenObjectAuditAlarm