| Win32_NamedJobObjectSecLimitSetting | |||
| The Win32_NamedJobObjectSecLimitSetting class represents the security limit settings for a job object. For more information about job object security limit settings, see the Job Object Security and Access Rights topic in the Platform SDK Base Services documentation. | |||
| NameSpace Path | |||
| \ROOT\CIMV2 | |||
| PROPERTY | SMS_REPORT | CIMTYPE | DESCRIPTION |
| Caption | String | A short textual description (one-line string) of the CIM_Setting object. | |
| Description | String | A textual description of the CIM_Setting object. | |
| PrivilegesToDelete | Object | This property specifies the privileges to delete from the token, if SecurityLimitFlags is Filter Tokens. This property can be NULL if you do not want to delete any privileges. | |
| RestrictedSIDs | Object | This property specifies the deny-only SIDs that will be added to the access token, if SecurityLimitFlags is Filter Tokens. This property can be NULL if you do not want to specify any deny-only SIDs. | |
| SecurityLimitFlags | UInt32 | Specifies the security limitations for the job.A value of No Administrator prevents any process in the job from using a token that specifies the local administrators group.A value of Rescricted Token prevents any process in the job from using a token that was not created with the CreateRestrictedToken function.A value of Specific Token forces processes in the job to run under.A value Filter Tokens of applies a filter to the token when a process impersonates a client. Requires at least one of the following properties to be set - SidsToDisable, PrivilegesToDelete, or RestrictedSids. | |
| SettingID | String | The identifier by which the job object security limit setting instance is known. As a Kernel object job object names are case sensitive. Because WMI keys are case insensitive, the name of the named job object must be decorated as follows: a capital letter should be preceded by a backslash. As a consequence of this convention, 'A' and 'a' are lower case and '\A' and '\a' are upper case. | |
| SIDsToDisable | Object | This property specifies the SIDs to disable for access checking, if SecurityLimitFlagss is Filter Tokens.This property can be NULL if you do not want to disable any SIDs. | |
| SAMPLE DATA INSTANCE | |||
|    [LOCALE(1033): ToInstance Amended]    instance of Win32_NamedJobObjectSecLimitSetting    {     SecurityLimitFlags = 0;     SettingID = "\\wmi\\provider\\sub\\system\\host\\job";    }; | |||