2000的内核对象都有一个安全级别,这个函数就是用来设置你的hkey 的安全级别的
先用惹RegOpenKey 或者 RegCreateKey 得到一个 hkey 句柄,然后定义一个 PSECURITY_DESCR 结构....
自己看msdn 呀
////////////////////////////////
LONG RegSetKeySecurity(
HKEY hKey, // handle to key
SECURITY_INFORMATION SecurityInformation, // request
PSECURITY_DESCRIPTOR pSecurityDescriptor // SD
);
Parameters
hKey
[in] Handle to an open key for which the security descriptor is set.
SecurityInformation
[in] Specifies the components of the security descriptor to set. The value can be a combination of the following values. Value Meaning
DACL_SECURITY_INFORMATION Sets the key's discretionary access control list (DACL). The hKey handle must have WRITE_DAC access, or the calling process must be the object's owner.
GROUP_SECURITY_INFORMATION Sets the key's primary group SID. The hKey handle must have WRITE_OWNER access, or the calling process must be the object's owner.
OWNER_SECURITY_INFORMATION Sets the key's owner security identifier (SID). The hKey handle must have WRITE_OWNER access, or the calling process must be the object's owner or have the SE_TAKE_OWNERSHIP_NAME privilege enabled.
SACL_SECURITY_INFORMATION Sets the key's system access control list (SACL). The hKey handle must have ACCESS_SYSTEM_SECURITY access. The proper way to get this access is to enable the SE_SECURITY_NAME privilege in the caller's current access token, open the handle for ACCESS_SYSTEM_SECURITY access, and then disable the privilege.
pSecurityDescriptor
[in] Pointer to a SECURITY_DESCRIPTOR structure that specifies the security attributes to set for the specified key