Query the New Windows Audit Policies Programmatically

//	---------------------------------------------------------------------------------------------
//	Author:			Marc Ochsenmeier
//	Email:			info@winitor.net
//	Web:			www.winitor.net
//	Date:			25.02.2010
//
//	Description:	Read the Windows Audit Policy settings programmatically like "Auditpol" does.
//	---------------------------------------------------------------------------------------------
#include "stdafx.h"

CAuditPolicyCategory::CAuditPolicyCategory(GUID* const guid): 
	m_pGuid(guid), m_pName(NULL)
{
}
CAuditPolicyCategory::~CAuditPolicyCategory()
{
	CleanAuditSubCategoriesCollection();
	m_pGuid = NULL;
}
GUID* CAuditPolicyCategory::GetGuid()
{
	return m_pGuid;
}
//	Retrieve its User Friendly Name
wstring CAuditPolicyCategory::GetFriendlyName()
{
	wstring sFriendlyName;

	if(m_pGuid)
	{
		if( AuditLookupCategoryName(m_pGuid, &m_pName))
		{
			sFriendlyName = m_pName;
		}
	}
	else
	{
		//	Error
	}
	return sFriendlyName;
}
void CAuditPolicyCategory::CleanAuditSubCategoriesCollection()
{
	AuditPolicySubCategory::iterator it = m_vAuditPolicySubCategories.begin();
	for( ;it!=m_vAuditPolicySubCategories.end(); it++)
	{
		CAuditPolicySubCategory* item = *it;
		delete item;
	}
	m_vAuditPolicySubCategories.clear();
}

vector<CAuditPolicySubCategory*> CAuditPolicyCategory::GetSubCategories()
{
	//	Clean from previous call.
	CleanAuditSubCategoriesCollection();

	GUID* pGuid = NULL;
	ULONG uCount = 0;
	if(AuditEnumerateSubCategories(
		m_pGuid, 
		FALSE /*return only the Subcategories for this Category*/, 
		&pGuid, 
		&uCount))
	{
		GUID* pCurrentGuid = pGuid;
		for(ULONG i=0; i<uCount; i++)
		{
			m_vAuditPolicySubCategories.push_back(new CAuditPolicySubCategory(pCurrentGuid));
			pCurrentGuid++;
		}
	}
	else
	{
		//	Error
	}
	return m_vAuditPolicySubCategories;
}