BACK TO INDEX

Win32_NamedJobObjectSecLimitSetting
The Win32_NamedJobObjectSecLimitSetting class represents the security limit settings for a job object. For more information about job object security limit settings, see the Job Object Security and Access Rights topic in the Platform SDK Base Services documentation.
NameSpace Path
\ROOT\CIMV2
PROPERTYSMS_REPORTCIMTYPEDESCRIPTION
CaptionStringA short textual description (one-line string) of the CIM_Setting object.
DescriptionStringA textual description of the CIM_Setting object.
PrivilegesToDeleteObjectThis property specifies the privileges to delete from the token, if SecurityLimitFlags is Filter Tokens. This property can be NULL if you do not want to delete any privileges.
RestrictedSIDsObjectThis property specifies the deny-only SIDs that will be added to the access token, if SecurityLimitFlags is Filter Tokens. This property can be NULL if you do not want to specify any deny-only SIDs.
SecurityLimitFlagsUInt32Specifies the security limitations for the job.A value of No Administrator prevents any process in the job from using a token that specifies the local administrators group.A value of Rescricted Token prevents any process in the job from using a token that was not created with the CreateRestrictedToken function.A value of Specific Token forces processes in the job to run under.A value Filter Tokens of applies a filter to the token when a process impersonates a client. Requires at least one of the following properties to be set - SidsToDisable, PrivilegesToDelete, or RestrictedSids.
SettingIDStringThe identifier by which the job object security limit setting instance is known. As a Kernel object job object names are case sensitive. Because WMI keys are case insensitive, the name of the named job object must be decorated as follows: a capital letter should be preceded by a backslash. As a consequence of this convention, 'A' and 'a' are lower case and '\A' and '\a' are upper case.
SIDsToDisableObjectThis property specifies the SIDs to disable for access checking, if SecurityLimitFlagss is Filter Tokens.This property can be NULL if you do not want to disable any SIDs.
SAMPLE DATA INSTANCE
   [LOCALE(1033): ToInstance Amended]
   instance of Win32_NamedJobObjectSecLimitSetting
   {
    SecurityLimitFlags = 0;
    SettingID = "\\wmi\\provider\\sub\\system\\host\\job";
   };