Share via


Workflow Process Security Mode

This content is no longer actively maintained. It is provided as is, for anyone who may still be using these technologies, with no warranties or claims of accuracy with regard to the most recent product version or service release.

The workflow process security mode controls the types of events that can be executed by your workflow scripts. At design time, the security mode for the workflow process is not verified. You can create any script procedure and save it as part of your workflow process. However, when a workflow process executes script at run time, the security mode property of the process definition is evaluated to determine whether it is running in privileged or restricted mode.

Privileged Mode

In privileged mode, any type of script procedure can be executed. Script executes under the same Microsoft® Windows® 2000 security context as the workflow engine itself — typically, the Workflow System Account defined by the server administrator. For example, script running in privileged mode can delete a Microsoft® Exchange 2000 folder and all the items in it or change the permissions for users.

Additionally, when running in privileged mode, your script procedures are able to create COM objects, making it possible for you to integrate with other business applications that provide COM components.

Restricted Mode

Restricted mode script executes under a security context with few or no permissions (anonymous). The workflow engine permits only the following events in restricted mode: modifying properties of the item undergoing workflow, sending notification e-mail, and writing to the AuditTrail Provider.

If your workflow process is running in restricted mode and it attempts to execute a procedure that is not permitted, an error is displayed, and the procedure is canceled.

For more information about the security mode of workflow processes, see "Mode Property" in the Exchange 2000 Server SDK reference section of the Microsoft® Developer Network (MSDN®) Online Exchange Server Developer Center at http://msdn.microsoft.com/exchange/.

See Also

Scripting in the Workflow Designer for Exchange Server | Creating Script Procedures | Choosing Workflow Events | Debugging Script in the Workflow Designer for Exchange Server | Script Examples for Exchange Server | Workflow Scripting | Security Checklist | Setting the Security Mode