ACE

2021-08-19

An ACE is an access control entry in an access control list (ACL).

The following table lists the currently defined ACE types.

ACE type	Structure	ACL type
Access allowed	ACCESS_ALLOWED_ACE	Discretionary
Access allowed Allows callback during access check	ACCESS_ALLOWED_CALLBACK_ACE	Discretionary
Access allowed Object specific	ACCESS_ALLOWED_OBJECT_ACE	Discretionary
Access allowed Object specific Allows callback during access check	ACCESS_ALLOWED_CALLBACK_OBJECT_ACE	Discretionary
Access denied	ACCESS_DENIED_ACE	Discretionary
Access denied Allows callback during access check	ACCESS_DENIED_CALLBACK_ACE	Discretionary
Access denied Object specific Allows callback during access check	ACCESS_DENIED_CALLBACK_OBJECT_ACE	Discretionary
Access denied Object specific	ACCESS_DENIED_OBJECT_ACE	Discretionary
System alarm	SYSTEM_ALARM_ACE	System
System alarm Allows callback during access check	SYSTEM_ALARM_CALLBACK_ACE	System
System alarm Object specific Allows callback during access check	SYSTEM_ALARM_CALLBACK_OBJECT_ACE	System
System alarm Object specific	SYSTEM_ALARM_OBJECT_ACE	System
System audit	SYSTEM_AUDIT_ACE	System
System audit Allows callback during access check	SYSTEM_AUDIT_CALLBACK_ACE	System
System audit Object specific Allows callback during access check	SYSTEM_AUDIT_CALLBACK_OBJECT_ACE	System
System audit Object specific	SYSTEM_AUDIT_OBJECT_ACE	System

System-alarm and object-specific system-alarm ACEs are not currently supported.

Note

Each ACE starts with an ACE_HEADER structure. The format of the data following the header varies according to the ACE type specified in the header.

Requirements

Requirement	Value
Minimum supported client	Windows XP [desktop apps only]
Minimum supported server	Windows Server 2003 [desktop apps only]
Header	Winnt.h (include Windows.h)

Share via

ACE

Requirements

See also

Feedback

Additional resources