| 术语 | netgroupadduser |
| 释义 | NetGroupAddUser 语法： C++ NET_API_STATUS NetGroupAddUser( __in LPCWSTR servername, __in LPCWSTR GroupName, __in LPCWSTR username ); NetGroupAddUser功能 该NetGroupAddUser函数给出了在现有的全局组现有的用户帐户的安全数据库，它是安全帐户管理器(SAM)数据库或成员，在域控制器的情况下，Active Directory中。 参数 服务器名 [in] 指针常量字符串指定的DNS或NetBIOS的远程服务器上的功能是执行的名称。如果该参数为NULL，则使用本地计算机。 GroupName的 [in] 指针常量字符串指定全局组中，用户应给予会员的名字。有关详细信息，请参阅下面的备注部分。 用户名 [in] 指针常量字符串，指定的用户名，应在全局组成员身份。有关详细信息，请参阅下面的备注部分。 返回值 如果函数成功，返回值是NERR_Success。 如果函数失败，返回值可以是下面的错误代码之一。 返回codeDescription ERROR_ACCESS_DENIEDThe用户没有获得所需的信息。 NERR_InvalidComputerThe计算机名无效。 NERR_NotPrimaryThe操作只允许在该域的主域控制器。 NERR_SpeGroupOpThe操作是不允许的某些特殊群体。这些群体包括用户组，管理员组，本地组和嘉宾组。 NERR_UserNotFoundThe用户名找不到。 NERR_GroupNotFoundThe全局组名称找不到。 备注 如果您调用域控制器上运行Active Directory的这一功能，允许访问或拒绝的访问控制列表的安全对象(ACL)的基础。默认的ACL只允许域管理员和Account Operators调用此函数。在成员服务器或工作站，只有Administrators和Power Users可以调用这个函数。有关更多信息，请参阅的网络管理功能的安全要求。欲了解更多有关的ACL，ACE的，和访问令牌信息，请访问控制模型。 该小组的对象的安全描述符用于执行此函数访问检查。 用户帐户名称被限制为20个字符和组名称被限制为256个字符。此外，帐户名称不能终止的期间，他们不能包含逗号或以下打印字符：“，/，\\，[，]：，|，”，“+，=，，，？， *.名称也不能包括在1-31范围内，这些非打印字符。 如果您是Active Directory的程序，您可以调用某些Active Directory服务接口(ADSI)的方法来达到同样的功能，您可以通过调用实现网络管理小组的职能。有关更多信息，请参阅IADsGroup。 要求： 最低支持：client－Windows 2000专业版 最低支持server－Windows 2000服务器 HeaderLmaccess.h(包括Lm.h) LibraryNetapi32.lib DLLNetapi32.dll 参见 网络管理概述 网络管理功能 集团职能 NetGroupAdd NetGroupDel NetGroupDelUser 如果有任何问题和意见，请发送给微软(wsddocfb@microsoft.com) 生成日期：2009年8月13日 ＝＝英文原文＝＝NetGroupAddUser Function The NetGroupAddUser function gives an existing user account membership in an existing global group in the security database, which is the security accounts manager (SAM) database or, in the case of domain controllers, the Active Directory. Syntax C++ NET_API_STATUS NetGroupAddUser( __in LPCWSTR servername, __in LPCWSTR GroupName, __in LPCWSTR username ); Parameters servername [in] Pointer to a constant string that specifies the DNS or NetBIOS name of the remote server on which the function is to execute. If this parameter is NULL, the local computer is used. GroupName [in] Pointer to a constant string that specifies the name of the global group in which the user is to be given membership. For more information, see the following Remarks section. username [in] Pointer to a constant string that specifies the name of the user to be given membership in the global group. For more information, see the following Remarks section. Return Value If the function succeeds, the return value is NERR_Success. If the function fails, the return value can be one of the following error codes. Return codeDescription ERROR_ACCESS_DENIEDThe user does not have access to the requested information. NERR_InvalidComputerThe computer name is invalid. NERR_NotPrimaryThe operation is allowed only on the primary domain controller of the domain. NERR_SpeGroupOpThe operation is not allowed on certain special groups. These groups include user groups, admin groups, local groups, and guest groups. NERR_UserNotFoundThe user name could not be found. NERR_GroupNotFoundThe global group name could not be found. Remarks If you call this function on a domain controller that is running Active Directory, access is allowed or denied based on the access control list (ACL) for the securable object . The default ACL permits only Domain Admins and Account Operators to call this function. On a member server or workstation, only Administrators and Power Users can call this function. For more information, see Security Requirements for the Network Management Functions . For more information on ACLs, ACEs, and access tokens, see Access Control Model . The security descriptor of the Group object is used to perform the access check for this function. User account names are limited to 20 characters and group names are limited to 256 characters. In addition, account names cannot be terminated by a period and they cannot include commas or any of the following printable characters: ", /, \\, [, ], :, |, <, >, +, =, ;, ?, *. Names also cannot include characters in the range 1-31, which are nonprintable. If you are programming for Active Directory, you may be able to call certain Active Directory Service Interface (ADSI) methods to achieve the same functionality you can achieve by calling the network management group functions. For more information, see IADsGroup . Requirements Minimum supported clientWindows 2000 Professional Minimum supported serverWindows 2000 Server HeaderLmaccess.h (include Lm.h) LibraryNetapi32.lib DLLNetapi32.dll See Also Network Management Overview Network Management Functions Group Functions NetGroupAdd NetGroupDel NetGroupDelUser Send comments about this topic to Microsoft Build date: 8/13/2009 ＝＝原始网址＝＝http://msdn.microsoft.com/en-us/library/aa370425(VS.85).aspx\n |
| 随便看 |
|
windows api函数参考手册包含2258条windows api函数文档，详细介绍nodejs、java、rust调用windows api的方法技巧，是学习windows api编程的入门中文文档。