$endif $endif $endif $if _In_reads_bytes_ _IRQL_requires_max_ AbsoluteObjectName AccessGranted AccessMode AccessState AccessStatus DesiredAccess ExplicitDescriptor GenerateOnClose GenericMapping GrantedAccess IsDirectoryObject NewDescriptor Object ObjectCreated ParentSecurityDescriptor PoolType PreviouslyGrantedAccess PreviousMode Privileges SeAccessCheckFromState SeAppendPrivileges SeAssignSecurityEx SeAuditHardLinkCreation SeAuditHardLinkCreationWithTransaction SeAuditingAnyFileEventsWithContext SeAuditingFileEvents SeAuditingFileEventsWithContext SeAuditingFileOrGlobalEvents SeAuditingHardLinkEventsWithContext SeAuditTransactionStateChange SeCaptureSubjectContext SeCreateClientSecurity SeCreateClientSecurityFromSubjectContext SecurityDescriptor SeDeleteClientSecurity SeDeleteObjectAuditAlarm SeDeleteObjectAuditAlarmWithTransaction SeExamineGlobalSacl SeExamineSacl SeExports SeFilterToken SeFreePrivileges SeImpersonateClient SeImpersonateClientEx SeLengthSid SeLocateProcessImageName SeLockSubjectContext SeMarkLogonSessionForTerminationNotification SeMaximumAuditMaskFromGlobalSacl SeObjectCreateSaclAccessBits SeOpenObjectAuditAlarm SeOpenObjectForDeleteAuditAlarm SeOpenObjectForDeleteAuditAlarmWithTransaction SePrivilegeCheck SeQueryAuthenticationIdToken SeQueryInformationToken SeQuerySecurityDescriptorInfo SeQuerySessionIdToken SeQuerySubjectContextToken SeQueryTokenIntegrity SeRegisterLogonSessionTerminatedRoutine SeReleaseSubjectContext SeReportSecurityEvent SeReportSecurityEventWithSubCategory SeSetAccessStateGenericMapping SeSetAuditParameter SeSetSecurityDescriptorInfo SeSetSecurityDescriptorInfoEx SeSetSessionIdToken SeStopImpersonatingClient SeTokenIsAdmin SeTokenIsRestricted SeTokenType SeUnlockSubjectContext SeUnregisterLogonSessionTerminatedRoutine SubjectContext SubjectContextLocked SubjectSecurityContext TransactionId

NTKERNELAPI VOID NTAPI SeAuditTransactionStateChange ( _In_ GUID *  TransactionId, _In_ GUID *  ResourceManagerId, _In_ ULONG  NewTransactionState  )