1/**
2 * This file has no copyright assigned and is placed in the Public Domain.
3 * This file is part of the mingw-w64 runtime package.
4 * No warranty is given; refer to the file DISCLAIMER.PD within this package.
5 */
6
7#ifdef DEFINE_GUID
8
9#if !defined(INITGUID) || !defined(Audit_System_SecurityStateChange_defined)
10DEFINE_GUID(Audit_System_SecurityStateChange, 0x0cce9210, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
11#ifdef INITGUID
12#define Audit_System_SecurityStateChange_defined
13#endif
14#endif
15
16#if !defined(INITGUID) || !defined(Audit_System_SecuritySubsystemExtension_defined)
17DEFINE_GUID(Audit_System_SecuritySubsystemExtension, 0x0cce9211, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
18#ifdef INITGUID
19#define Audit_System_SecuritySubsystemExtension_defined
20#endif
21#endif
22
23#if !defined(INITGUID) || !defined(Audit_System_Integrity_defined)
24DEFINE_GUID(Audit_System_Integrity, 0x0cce9212, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
25#ifdef INITGUID
26#define Audit_System_Integrity_defined
27#endif
28#endif
29
30#if !defined(INITGUID) || !defined(Audit_System_IPSecDriverEvents_defined)
31DEFINE_GUID(Audit_System_IPSecDriverEvents, 0x0cce9213, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
32#ifdef INITGUID
33#define Audit_System_IPSecDriverEvents_defined
34#endif
35#endif
36
37#if !defined(INITGUID) || !defined(Audit_System_Others_defined)
38DEFINE_GUID(Audit_System_Others, 0x0cce9214, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
39#ifdef INITGUID
40#define Audit_System_Others_defined
41#endif
42#endif
43
44#if !defined(INITGUID) || !defined(Audit_Logon_Logon_defined)
45DEFINE_GUID(Audit_Logon_Logon, 0x0cce9215, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
46#ifdef INITGUID
47#define Audit_Logon_Logon_defined
48#endif
49#endif
50
51#if !defined(INITGUID) || !defined(Audit_Logon_Logoff_defined)
52DEFINE_GUID(Audit_Logon_Logoff, 0x0cce9216, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
53#ifdef INITGUID
54#define Audit_Logon_Logoff_defined
55#endif
56#endif
57
58#if !defined(INITGUID) || !defined(Audit_Logon_AccountLockout_defined)
59DEFINE_GUID(Audit_Logon_AccountLockout, 0x0cce9217, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
60#ifdef INITGUID
61#define Audit_Logon_AccountLockout_defined
62#endif
63#endif
64
65#if !defined(INITGUID) || !defined(Audit_Logon_IPSecMainMode_defined)
66DEFINE_GUID(Audit_Logon_IPSecMainMode, 0x0cce9218, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
67#ifdef INITGUID
68#define Audit_Logon_IPSecMainMode_defined
69#endif
70#endif
71
72#if !defined(INITGUID) || !defined(Audit_Logon_IPSecQuickMode_defined)
73DEFINE_GUID(Audit_Logon_IPSecQuickMode, 0x0cce9219, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
74#ifdef INITGUID
75#define Audit_Logon_IPSecQuickMode_defined
76#endif
77#endif
78
79#if !defined(INITGUID) || !defined(Audit_Logon_IPSecUserMode_defined)
80DEFINE_GUID(Audit_Logon_IPSecUserMode, 0x0cce921a, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
81#ifdef INITGUID
82#define Audit_Logon_IPSecUserMode_defined
83#endif
84#endif
85
86#if !defined(INITGUID) || !defined(Audit_Logon_SpecialLogon_defined)
87DEFINE_GUID(Audit_Logon_SpecialLogon, 0x0cce921b, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
88#ifdef INITGUID
89#define Audit_Logon_SpecialLogon_defined
90#endif
91#endif
92
93#if !defined(INITGUID) || !defined(Audit_Logon_Others_defined)
94DEFINE_GUID(Audit_Logon_Others, 0x0cce921c, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
95#ifdef INITGUID
96#define Audit_Logon_Others_defined
97#endif
98#endif
99
100#if !defined(INITGUID) || !defined(Audit_ObjectAccess_FileSystem_defined)
101DEFINE_GUID(Audit_ObjectAccess_FileSystem, 0x0cce921d, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
102#ifdef INITGUID
103#define Audit_ObjectAccess_FileSystem_defined
104#endif
105#endif
106
107#if !defined(INITGUID) || !defined(Audit_ObjectAccess_Registry_defined)
108DEFINE_GUID(Audit_ObjectAccess_Registry, 0x0cce921e, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
109#ifdef INITGUID
110#define Audit_ObjectAccess_Registry_defined
111#endif
112#endif
113
114#if !defined(INITGUID) || !defined(Audit_ObjectAccess_Kernel_defined)
115DEFINE_GUID(Audit_ObjectAccess_Kernel, 0x0cce921f, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
116#ifdef INITGUID
117#define Audit_ObjectAccess_Kernel_defined
118#endif
119#endif
120
121#if !defined(INITGUID) || !defined(Audit_ObjectAccess_Sam_defined)
122DEFINE_GUID(Audit_ObjectAccess_Sam, 0x0cce9220, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
123#ifdef INITGUID
124#define Audit_ObjectAccess_Sam_defined
125#endif
126#endif
127
128#if !defined(INITGUID) || !defined(Audit_ObjectAccess_CertificationServices_defined)
129DEFINE_GUID(Audit_ObjectAccess_CertificationServices, 0x0cce9221, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
130#ifdef INITGUID
131#define Audit_ObjectAccess_CertificationServices_defined
132#endif
133#endif
134
135#if !defined(INITGUID) || !defined(Audit_ObjectAccess_ApplicationGenerated_defined)
136DEFINE_GUID(Audit_ObjectAccess_ApplicationGenerated, 0x0cce9222, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
137#ifdef INITGUID
138#define Audit_ObjectAccess_ApplicationGenerated_defined
139#endif
140#endif
141#if !defined(INITGUID) || !defined(Audit_ObjectAccess_Handle_defined)
142DEFINE_GUID(Audit_ObjectAccess_Handle, 0x0cce9223, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
143#ifdef INITGUID
144#define Audit_ObjectAccess_Handle_defined
145#endif
146#endif
147
148#if !defined(INITGUID) || !defined(Audit_ObjectAccess_Share_defined)
149DEFINE_GUID(Audit_ObjectAccess_Share, 0x0cce9224, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
150#ifdef INITGUID
151#define Audit_ObjectAccess_Share_defined
152#endif
153#endif
154
155#if !defined(INITGUID) || !defined(Audit_ObjectAccess_FirewallPacketDrops_defined)
156DEFINE_GUID(Audit_ObjectAccess_FirewallPacketDrops, 0x0cce9225, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
157#ifdef INITGUID
158#define Audit_ObjectAccess_FirewallPacketDrops_defined
159#endif
160#endif
161
162#if !defined(INITGUID) || !defined(Audit_ObjectAccess_FirewallConnection_defined)
163DEFINE_GUID(Audit_ObjectAccess_FirewallConnection, 0x0cce9226, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
164#ifdef INITGUID
165#define Audit_ObjectAccess_FirewallConnection_defined
166#endif
167#endif
168
169#if !defined(INITGUID) || !defined(Audit_ObjectAccess_Other_defined)
170DEFINE_GUID(Audit_ObjectAccess_Other, 0x0cce9227, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
171#ifdef INITGUID
172#define Audit_ObjectAccess_Other_defined
173#endif
174#endif
175
176#if !defined(INITGUID) || !defined(Audit_PrivilegeUse_Sensitive_defined)
177DEFINE_GUID(Audit_PrivilegeUse_Sensitive, 0x0cce9228, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
178#ifdef INITGUID
179#define Audit_PrivilegeUse_Sensitive_defined
180#endif
181#endif
182
183#if !defined(INITGUID) || !defined(Audit_PrivilegeUse_NonSensitive_defined)
184DEFINE_GUID(Audit_PrivilegeUse_NonSensitive, 0x0cce9229, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
185#ifdef INITGUID
186#define Audit_PrivilegeUse_NonSensitive_defined
187#endif
188#endif
189
190#if !defined(INITGUID) || !defined(Audit_PrivilegeUse_Others_defined)
191DEFINE_GUID(Audit_PrivilegeUse_Others, 0x0cce922a, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
192#ifdef INITGUID
193#define Audit_PrivilegeUse_Others_defined
194#endif
195#endif
196
197#if !defined(INITGUID) || !defined(Audit_DetailedTracking_ProcessCreation_defined)
198DEFINE_GUID(Audit_DetailedTracking_ProcessCreation, 0x0cce922b, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
199#ifdef INITGUID
200#define Audit_DetailedTracking_ProcessCreation_defined
201#endif
202#endif
203
204#if !defined(INITGUID) || !defined(Audit_DetailedTracking_ProcessTermination_defined)
205DEFINE_GUID(Audit_DetailedTracking_ProcessTermination, 0x0cce922c, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
206#ifdef INITGUID
207#define Audit_DetailedTracking_ProcessTermination_defined
208#endif
209#endif
210
211#if !defined(INITGUID) || !defined(Audit_DetailedTracking_DpapiActivity_defined)
212DEFINE_GUID(Audit_DetailedTracking_DpapiActivity, 0x0cce922d, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
213#ifdef INITGUID
214#define Audit_DetailedTracking_DpapiActivity_defined
215#endif
216#endif
217
218#if !defined(INITGUID) || !defined(Audit_DetailedTracking_RpcCall_defined)
219DEFINE_GUID(Audit_DetailedTracking_RpcCall, 0x0cce922e, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
220#ifdef INITGUID
221#define Audit_DetailedTracking_RpcCall_defined
222#endif
223#endif
224
225#if !defined(INITGUID) || !defined(Audit_PolicyChange_AuditPolicy_defined)
226DEFINE_GUID(Audit_PolicyChange_AuditPolicy, 0x0cce922f, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
227#ifdef INITGUID
228#define Audit_PolicyChange_AuditPolicy_defined
229#endif
230#endif
231
232#if !defined(INITGUID) || !defined(Audit_PolicyChange_AuthenticationPolicy_defined)
233DEFINE_GUID(Audit_PolicyChange_AuthenticationPolicy, 0x0cce9230, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
234#ifdef INITGUID
235#define Audit_PolicyChange_AuthenticationPolicy_defined
236#endif
237#endif
238
239#if !defined(INITGUID) || !defined(Audit_PolicyChange_AuthorizationPolicy_defined)
240DEFINE_GUID(Audit_PolicyChange_AuthorizationPolicy, 0x0cce9231, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
241#ifdef INITGUID
242#define Audit_PolicyChange_AuthorizationPolicy_defined
243#endif
244#endif
245
246#if !defined(INITGUID) || !defined(Audit_PolicyChange_MpsscvRulePolicy_defined)
247DEFINE_GUID(Audit_PolicyChange_MpsscvRulePolicy, 0x0cce9232, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
248#ifdef INITGUID
249#define Audit_PolicyChange_MpsscvRulePolicy_defined
250#endif
251#endif
252
253#if !defined(INITGUID) || !defined(Audit_PolicyChange_WfpIPSecPolicy_defined)
254DEFINE_GUID(Audit_PolicyChange_WfpIPSecPolicy, 0x0cce9233, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
255#ifdef INITGUID
256#define Audit_PolicyChange_WfpIPSecPolicy_defined
257#endif
258#endif
259
260#if !defined(INITGUID) || !defined(Audit_PolicyChange_Others_defined)
261DEFINE_GUID(Audit_PolicyChange_Others, 0x0cce9234, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
262#ifdef INITGUID
263#define Audit_PolicyChange_Others_defined
264#endif
265#endif
266
267#if !defined(INITGUID) || !defined(Audit_AccountManagement_UserAccount_defined)
268DEFINE_GUID(Audit_AccountManagement_UserAccount, 0x0cce9235, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
269#ifdef INITGUID
270#define Audit_AccountManagement_UserAccount_defined
271#endif
272#endif
273
274#if !defined(INITGUID) || !defined(Audit_AccountManagement_ComputerAccount_defined)
275DEFINE_GUID(Audit_AccountManagement_ComputerAccount, 0x0cce9236, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
276#ifdef INITGUID
277#define Audit_AccountManagement_ComputerAccount_defined
278#endif
279#endif
280
281#if !defined(INITGUID) || !defined(Audit_AccountManagement_SecurityGroup_defined)
282DEFINE_GUID(Audit_AccountManagement_SecurityGroup, 0x0cce9237, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
283#ifdef INITGUID
284#define Audit_AccountManagement_SecurityGroup_defined
285#endif
286#endif
287
288#if !defined(INITGUID) || !defined(Audit_AccountManagement_DistributionGroup_defined)
289DEFINE_GUID(Audit_AccountManagement_DistributionGroup, 0x0cce9238, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
290#ifdef INITGUID
291#define Audit_AccountManagement_DistributionGroup_defined
292#endif
293#endif
294
295#if !defined(INITGUID) || !defined(Audit_AccountManagement_ApplicationGroup_defined)
296DEFINE_GUID(Audit_AccountManagement_ApplicationGroup, 0x0cce9239, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
297#ifdef INITGUID
298#define Audit_AccountManagement_ApplicationGroup_defined
299#endif
300#endif
301
302#if !defined(INITGUID) || !defined(Audit_AccountManagement_Others_defined)
303DEFINE_GUID(Audit_AccountManagement_Others, 0x0cce923a, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
304#ifdef INITGUID
305#define Audit_AccountManagement_Others_defined
306#endif
307#endif
308
309#if !defined(INITGUID) || !defined(Audit_DSAccess_DSAccess_defined)
310DEFINE_GUID(Audit_DSAccess_DSAccess, 0x0cce923b, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
311#ifdef INITGUID
312#define Audit_DSAccess_DSAccess_defined
313#endif
314#endif
315
316#if !defined(INITGUID) || !defined(Audit_DsAccess_AdAuditChanges_defined)
317DEFINE_GUID(Audit_DsAccess_AdAuditChanges, 0x0cce923c, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
318#ifdef INITGUID
319#define Audit_DsAccess_AdAuditChanges_defined
320#endif
321#endif
322
323#if !defined(INITGUID) || !defined(Audit_Ds_Replication_defined)
324DEFINE_GUID(Audit_Ds_Replication, 0x0cce923d, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
325#ifdef INITGUID
326#define Audit_Ds_Replication_defined
327#endif
328#endif
329
330#if !defined(INITGUID) || !defined(Audit_Ds_DetailedReplication_defined)
331DEFINE_GUID(Audit_Ds_DetailedReplication, 0x0cce923e, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
332#ifdef INITGUID
333#define Audit_Ds_DetailedReplication_defined
334#endif
335#endif
336
337#if !defined(INITGUID) || !defined(Audit_AccountLogon_CredentialValidation_defined)
338DEFINE_GUID(Audit_AccountLogon_CredentialValidation, 0x0cce923f, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
339#ifdef INITGUID
340#define Audit_AccountLogon_CredentialValidation_defined
341#endif
342#endif
343
344#if !defined(INITGUID) || !defined(Audit_AccountLogon_Kerberos_defined)
345DEFINE_GUID(Audit_AccountLogon_Kerberos, 0x0cce9240, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
346#ifdef INITGUID
347#define Audit_AccountLogon_Kerberos_defined
348#endif
349#endif
350
351#if !defined(INITGUID) || !defined(Audit_AccountLogon_Others_defined)
352DEFINE_GUID(Audit_AccountLogon_Others, 0x0cce9241, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
353#ifdef INITGUID
354#define Audit_AccountLogon_Others_defined
355#endif
356#endif
357
358#if !defined(INITGUID) || !defined(Audit_AccountLogon_KerbCredentialValidation_defined)
359DEFINE_GUID(Audit_AccountLogon_KerbCredentialValidation, 0x0cce9242, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
360#ifdef INITGUID
361#define Audit_AccountLogon_KerbCredentialValidation_defined
362#endif
363#endif
364
365#if !defined(INITGUID) || !defined(Audit_Logon_NPS_defined)
366DEFINE_GUID(Audit_Logon_NPS, 0x0cce9243, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
367#ifdef INITGUID
368#define Audit_Logon_NPS_defined
369#endif
370#endif
371
372#if !defined(INITGUID) || !defined(Audit_ObjectAccess_DetailedFileShare_defined)
373DEFINE_GUID(Audit_ObjectAccess_DetailedFileShare, 0x0cce9244, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
374#ifdef INITGUID
375#define Audit_ObjectAccess_DetailedFileShare_defined
376#endif
377#endif
378
379#if !defined(INITGUID) || !defined(Audit_ObjectAccess_RemovableStorage_defined)
380DEFINE_GUID(Audit_ObjectAccess_RemovableStorage, 0x0cce9245, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
381#ifdef INITGUID
382#define Audit_ObjectAccess_RemovableStorage_defined
383#endif
384#endif
385
386#if !defined(INITGUID) || !defined(Audit_ObjectAccess_CbacStaging_defined)
387DEFINE_GUID(Audit_ObjectAccess_CbacStaging, 0x0cce9246, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
388#ifdef INITGUID
389#define Audit_ObjectAccess_CbacStaging_defined
390#endif
391#endif
392
393#if !defined(INITGUID) || !defined(Audit_Logon_Claims_defined)
394DEFINE_GUID(Audit_Logon_Claims, 0x0cce9247, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
395#ifdef INITGUID
396#define Audit_Logon_Claims_defined
397#endif
398#endif
399
400#if !defined(INITGUID) || !defined(Audit_DetailedTracking_PnpActivity_defined)
401DEFINE_GUID(Audit_DetailedTracking_PnpActivity, 0x0cce9248, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
402#ifdef INITGUID
403#define Audit_DetailedTracking_PnpActivity_defined
404#endif
405#endif
406
407#if !defined(INITGUID) || !defined(Audit_Logon_Groups_defined)
408DEFINE_GUID(Audit_Logon_Groups, 0x0cce9249, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
409#ifdef INITGUID
410#define Audit_Logon_Groups_defined
411#endif
412#endif
413
414#if !defined(INITGUID) || !defined(Audit_DetailedTracking_TokenRightAdjusted_defined)
415DEFINE_GUID(Audit_DetailedTracking_TokenRightAdjusted, 0x0cce924a, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
416#ifdef INITGUID
417#define Audit_DetailedTracking_TokenRightAdjusted_defined
418#endif
419#endif
420
421#if !defined(INITGUID) || !defined(Audit_System_defined)
422DEFINE_GUID(Audit_System, 0x69979848, 0x797a, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
423#ifdef INITGUID
424#define Audit_System_defined
425#endif
426#endif
427
428#if !defined(INITGUID) || !defined(Audit_Logon_defined)
429DEFINE_GUID(Audit_Logon, 0x69979849, 0x797a, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
430#ifdef INITGUID
431#define Audit_Logon_defined
432#endif
433#endif
434
435#if !defined(INITGUID) || !defined(Audit_ObjectAccess_defined)
436DEFINE_GUID(Audit_ObjectAccess, 0x6997984a, 0x797a, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
437#ifdef INITGUID
438#define Audit_ObjectAccess_defined
439#endif
440#endif
441
442#if !defined(INITGUID) || !defined(Audit_PrivilegeUse_defined)
443DEFINE_GUID(Audit_PrivilegeUse, 0x6997984b, 0x797a, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
444#ifdef INITGUID
445#define Audit_PrivilegeUse_defined
446#endif
447#endif
448
449#if !defined(INITGUID) || !defined(Audit_DetailedTracking_defined)
450DEFINE_GUID(Audit_DetailedTracking, 0x6997984c, 0x797a, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
451#ifdef INITGUID
452#define Audit_DetailedTracking_defined
453#endif
454#endif
455
456#if !defined(INITGUID) || !defined(Audit_PolicyChange_defined)
457DEFINE_GUID(Audit_PolicyChange, 0x6997984d, 0x797a, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
458#ifdef INITGUID
459#define Audit_PolicyChange_defined
460#endif
461#endif
462
463#if !defined(INITGUID) || !defined(Audit_AccountManagement_defined)
464DEFINE_GUID(Audit_AccountManagement, 0x6997984e, 0x797a, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
465#ifdef INITGUID
466#define Audit_AccountManagement_defined
467#endif
468#endif
469
470#if !defined(INITGUID) || !defined(Audit_DirectoryServiceAccess_defined)
471DEFINE_GUID(Audit_DirectoryServiceAccess, 0x6997984f, 0x797a, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
472#ifdef INITGUID
473#define Audit_DirectoryServiceAccess_defined
474#endif
475#endif
476
477#if !defined(INITGUID) || !defined(Audit_AccountLogon_defined)
478DEFINE_GUID(Audit_AccountLogon, 0x69979850, 0x797a, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30);
479#ifdef INITGUID
480#define Audit_AccountLogon_defined
481#endif
482#endif
483#endif
484
485#ifndef _NTSECAPI_
486#define _NTSECAPI_
487
488#ifdef __cplusplus
489extern "C" {
490#endif
491
492#if !defined (_NTDEF_) && !defined (_NTSTATUS_PSDK)
493#define _NTSTATUS_PSDK
494 typedef LONG NTSTATUS,*PNTSTATUS;
495#endif
496
497#ifndef _NTLSA_IFS_
498 typedef ULONG LSA_OPERATIONAL_MODE,*PLSA_OPERATIONAL_MODE;
499#endif
500
501#define LSA_MODE_PASSWORD_PROTECTED (__MSABI_LONG(0x00000001))
502#define LSA_MODE_INDIVIDUAL_ACCOUNTS (__MSABI_LONG(0x00000002))
503#define LSA_MODE_MANDATORY_ACCESS (__MSABI_LONG(0x00000004))
504#define LSA_MODE_LOG_FULL (__MSABI_LONG(0x00000008))
505
506#ifndef _NTLSA_IFS_
507 typedef enum _SECURITY_LOGON_TYPE {
508 UndefinedLogonType = 0,
509 Interactive = 2,
510 Network,
511 Batch,
512 Service,
513 Proxy,
514 Unlock,
515 NetworkCleartext,
516 NewCredentials
517#if _WIN32_WINNT >= 0x0501
518 ,RemoteInteractive
519 ,CachedInteractive
520#endif
521#if _WIN32_WINNT >= 0x0502
522 ,CachedRemoteInteractive
523 ,CachedUnlock
524#endif
525 } SECURITY_LOGON_TYPE, *PSECURITY_LOGON_TYPE;
526
527#endif
528
529#ifndef _NTLSA_IFS_
530
531#ifndef _NTLSA_AUDIT_
532#define _NTLSA_AUDIT_
533
534typedef enum _SE_ADT_PARAMETER_TYPE {
535 SeAdtParmTypeNone = 0,
536 SeAdtParmTypeString,
537 SeAdtParmTypeFileSpec,
538 SeAdtParmTypeUlong,
539 SeAdtParmTypeSid,
540 SeAdtParmTypeLogonId,
541 SeAdtParmTypeNoLogonId,
542 SeAdtParmTypeAccessMask,
543 SeAdtParmTypePrivs,
544 SeAdtParmTypeObjectTypes,
545 SeAdtParmTypeHexUlong,
546 SeAdtParmTypePtr,
547 SeAdtParmTypeTime,
548 SeAdtParmTypeGuid,
549 SeAdtParmTypeLuid,
550 SeAdtParmTypeHexInt64,
551 SeAdtParmTypeStringList,
552 SeAdtParmTypeSidList,
553 SeAdtParmTypeDuration,
554 SeAdtParmTypeUserAccountControl,
555 SeAdtParmTypeNoUac,
556 SeAdtParmTypeMessage,
557 SeAdtParmTypeDateTime,
558 SeAdtParmTypeSockAddr,
559 SeAdtParmTypeSD,
560 SeAdtParmTypeLogonHours,
561 SeAdtParmTypeLogonIdNoSid,
562 SeAdtParmTypeUlongNoConv,
563 SeAdtParmTypeSockAddrNoPort,
564 SeAdtParmTypeAccessReason,
565 SeAdtParmTypeStagingReason,
566 SeAdtParmTypeResourceAttribute,
567 SeAdtParmTypeClaims,
568 SeAdtParmTypeLogonIdAsSid,
569 SeAdtParmTypeMultiSzString,
570 SeAdtParmTypeLogonIdEx
571 } SE_ADT_PARAMETER_TYPE, *PSE_ADT_PARAMETER_TYPE;
572
573#include <guiddef.h>
574
575#define SE_ADT_OBJECT_ONLY 0x1
576
577 typedef struct _SE_ADT_OBJECT_TYPE {
578 GUID ObjectType;
579 USHORT Flags;
580 USHORT Level;
581 ACCESS_MASK AccessMask;
582 } SE_ADT_OBJECT_TYPE,*PSE_ADT_OBJECT_TYPE;
583
584 typedef struct _SE_ADT_PARAMETER_ARRAY_ENTRY {
585 SE_ADT_PARAMETER_TYPE Type;
586 ULONG Length;
587 ULONG_PTR Data[2];
588 PVOID Address;
589 } SE_ADT_PARAMETER_ARRAY_ENTRY,*PSE_ADT_PARAMETER_ARRAY_ENTRY;
590
591 typedef struct _SE_ADT_ACCESS_REASON {
592 ACCESS_MASK AccessMask;
593 ULONG AccessReasons[32];
594 ULONG ObjectTypeIndex;
595 ULONG AccessGranted;
596 PSECURITY_DESCRIPTOR SecurityDescriptor;
597 } SE_ADT_ACCESS_REASON, *PSE_ADT_ACCESS_REASON;
598
599 typedef struct _SE_ADT_CLAIMS {
600 ULONG Length;
601 PCLAIMS_BLOB Claims;
602 } SE_ADT_CLAIMS, *PSE_ADT_CLAIMS;
603
604#define SE_MAX_AUDIT_PARAMETERS 32
605#define SE_MAX_GENERIC_AUDIT_PARAMETERS 28
606
607 typedef struct _SE_ADT_PARAMETER_ARRAY {
608 ULONG CategoryId;
609 ULONG AuditId;
610 ULONG ParameterCount;
611 ULONG Length;
612 USHORT Type;
613 ULONG Flags;
614 SE_ADT_PARAMETER_ARRAY_ENTRY Parameters[SE_MAX_AUDIT_PARAMETERS];
615 } SE_ADT_PARAMETER_ARRAY,*PSE_ADT_PARAMETER_ARRAY;
616
617 typedef struct _SE_ADT_PARAMETER_ARRAY_EX {
618 ULONG CategoryId;
619 ULONG AuditId;
620 ULONG Version;
621 ULONG ParameterCount;
622 ULONG Length;
623 USHORT FlatSubCategoryId;
624 USHORT Type;
625 ULONG Flags;
626 SE_ADT_PARAMETER_ARRAY_ENTRY Parameters[SE_MAX_AUDIT_PARAMETERS];
627 } SE_ADT_PARAMETER_ARRAY_EX, *PSE_ADT_PARAMETER_ARRAY_EX;
628
629#define SE_ADT_PARAMETERS_SELF_RELATIVE 0x00000001
630#define SE_ADT_PARAMETERS_SEND_TO_LSA 0x00000002
631#define SE_ADT_PARAMETER_EXTENSIBLE_AUDIT 0x00000004
632#define SE_ADT_PARAMETER_GENERIC_AUDIT 0x00000008
633#define SE_ADT_PARAMETER_WRITE_SYNCHRONOUS 0x00000010
634
635#define LSAP_SE_ADT_PARAMETER_ARRAY_TRUE_SIZE(AuditParameters) (sizeof(SE_ADT_PARAMETER_ARRAY) - sizeof(SE_ADT_PARAMETER_ARRAY_ENTRY) * (SE_MAX_AUDIT_PARAMETERS - AuditParameters->ParameterCount))
636
637#endif /* _NTLSA_AUDIT_ */
638#endif /* _NTLSA_IFS_ */
639
640 typedef enum _POLICY_AUDIT_EVENT_TYPE {
641 AuditCategorySystem = 0,AuditCategoryLogon,AuditCategoryObjectAccess,AuditCategoryPrivilegeUse,AuditCategoryDetailedTracking,
642 AuditCategoryPolicyChange,AuditCategoryAccountManagement,AuditCategoryDirectoryServiceAccess,AuditCategoryAccountLogon
643 } POLICY_AUDIT_EVENT_TYPE,*PPOLICY_AUDIT_EVENT_TYPE;
644
645#define POLICY_AUDIT_EVENT_UNCHANGED (__MSABI_LONG(0x00000000))
646#define POLICY_AUDIT_EVENT_SUCCESS (__MSABI_LONG(0x00000001))
647#define POLICY_AUDIT_EVENT_FAILURE (__MSABI_LONG(0x00000002))
648#define POLICY_AUDIT_EVENT_NONE (__MSABI_LONG(0x00000004))
649#define POLICY_AUDIT_EVENT_MASK (POLICY_AUDIT_EVENT_SUCCESS | POLICY_AUDIT_EVENT_FAILURE | POLICY_AUDIT_EVENT_UNCHANGED | POLICY_AUDIT_EVENT_NONE)
650
651#ifdef _NTDEF_
652 typedef UNICODE_STRING LSA_UNICODE_STRING,*PLSA_UNICODE_STRING;
653 typedef STRING LSA_STRING,*PLSA_STRING;
654 typedef OBJECT_ATTRIBUTES LSA_OBJECT_ATTRIBUTES,*PLSA_OBJECT_ATTRIBUTES;
655#else
656
657#ifndef _NO_W32_PSEUDO_MODIFIERS
658#ifndef IN
659#define IN
660#endif
661#ifndef OUT
662#define OUT
663#endif
664#ifndef OPTIONAL
665#define OPTIONAL
666#endif
667#endif
668
669 typedef struct _LSA_UNICODE_STRING {
670 USHORT Length;
671 USHORT MaximumLength;
672 PWSTR Buffer;
673 } LSA_UNICODE_STRING,*PLSA_UNICODE_STRING;
674
675 typedef struct _LSA_STRING {
676 USHORT Length;
677 USHORT MaximumLength;
678 PCHAR Buffer;
679 } LSA_STRING,*PLSA_STRING;
680
681 typedef struct _LSA_OBJECT_ATTRIBUTES {
682 ULONG Length;
683 HANDLE RootDirectory;
684 PLSA_UNICODE_STRING ObjectName;
685 ULONG Attributes;
686 PVOID SecurityDescriptor;
687 PVOID SecurityQualityOfService;
688 } LSA_OBJECT_ATTRIBUTES,*PLSA_OBJECT_ATTRIBUTES;
689#endif
690
691#define LSA_SUCCESS(Error) ((LONG)(Error) >= 0)
692
693#ifndef _NTLSA_IFS_
694 NTSTATUS NTAPI LsaRegisterLogonProcess(PLSA_STRING LogonProcessName,PHANDLE LsaHandle,PLSA_OPERATIONAL_MODE SecurityMode);
695 NTSTATUS NTAPI LsaLogonUser(HANDLE LsaHandle,PLSA_STRING OriginName,SECURITY_LOGON_TYPE LogonType,ULONG AuthenticationPackage,PVOID AuthenticationInformation,ULONG AuthenticationInformationLength,PTOKEN_GROUPS LocalGroups,PTOKEN_SOURCE SourceContext,PVOID *ProfileBuffer,PULONG ProfileBufferLength,PLUID LogonId,PHANDLE Token,PQUOTA_LIMITS Quotas,PNTSTATUS SubStatus);
696 NTSTATUS NTAPI LsaLookupAuthenticationPackage(HANDLE LsaHandle,PLSA_STRING PackageName,PULONG AuthenticationPackage);
697 NTSTATUS NTAPI LsaFreeReturnBuffer (PVOID Buffer);
698 NTSTATUS NTAPI LsaCallAuthenticationPackage(HANDLE LsaHandle,ULONG AuthenticationPackage,PVOID ProtocolSubmitBuffer,ULONG SubmitBufferLength,PVOID *ProtocolReturnBuffer,PULONG ReturnBufferLength,PNTSTATUS ProtocolStatus);
699 NTSTATUS NTAPI LsaDeregisterLogonProcess(HANDLE LsaHandle);
700 NTSTATUS NTAPI LsaConnectUntrusted(PHANDLE LsaHandle);
701 NTSTATUS NTAPI LsaInsertProtectedProcessAddress(PVOID BufferAddress,ULONG BufferSize);
702 NTSTATUS NTAPI LsaRemoveProtectedProcessAddress(PVOID BufferAddress,ULONG BufferSize);
703#endif
704
705#define POLICY_VIEW_LOCAL_INFORMATION __MSABI_LONG(0x00000001)
706#define POLICY_VIEW_AUDIT_INFORMATION __MSABI_LONG(0x00000002)
707#define POLICY_GET_PRIVATE_INFORMATION __MSABI_LONG(0x00000004)
708#define POLICY_TRUST_ADMIN __MSABI_LONG(0x00000008)
709#define POLICY_CREATE_ACCOUNT __MSABI_LONG(0x00000010)
710#define POLICY_CREATE_SECRET __MSABI_LONG(0x00000020)
711#define POLICY_CREATE_PRIVILEGE __MSABI_LONG(0x00000040)
712#define POLICY_SET_DEFAULT_QUOTA_LIMITS __MSABI_LONG(0x00000080)
713#define POLICY_SET_AUDIT_REQUIREMENTS __MSABI_LONG(0x00000100)
714#define POLICY_AUDIT_LOG_ADMIN __MSABI_LONG(0x00000200)
715#define POLICY_SERVER_ADMIN __MSABI_LONG(0x00000400)
716#define POLICY_LOOKUP_NAMES __MSABI_LONG(0x00000800)
717#define POLICY_NOTIFICATION __MSABI_LONG(0x00001000)
718
719#define POLICY_ALL_ACCESS (STANDARD_RIGHTS_REQUIRED | POLICY_VIEW_LOCAL_INFORMATION | POLICY_VIEW_AUDIT_INFORMATION | POLICY_GET_PRIVATE_INFORMATION | POLICY_TRUST_ADMIN | POLICY_CREATE_ACCOUNT | POLICY_CREATE_SECRET | POLICY_CREATE_PRIVILEGE | POLICY_SET_DEFAULT_QUOTA_LIMITS | POLICY_SET_AUDIT_REQUIREMENTS | POLICY_AUDIT_LOG_ADMIN | POLICY_SERVER_ADMIN | POLICY_LOOKUP_NAMES)
720#define POLICY_READ (STANDARD_RIGHTS_READ | POLICY_VIEW_AUDIT_INFORMATION | POLICY_GET_PRIVATE_INFORMATION)
721#define POLICY_WRITE (STANDARD_RIGHTS_WRITE | POLICY_TRUST_ADMIN | POLICY_CREATE_ACCOUNT | POLICY_CREATE_SECRET | POLICY_CREATE_PRIVILEGE | POLICY_SET_DEFAULT_QUOTA_LIMITS | POLICY_SET_AUDIT_REQUIREMENTS | POLICY_AUDIT_LOG_ADMIN | POLICY_SERVER_ADMIN)
722#define POLICY_EXECUTE (STANDARD_RIGHTS_EXECUTE | POLICY_VIEW_LOCAL_INFORMATION | POLICY_LOOKUP_NAMES)
723
724 typedef struct _LSA_TRUST_INFORMATION {
725 LSA_UNICODE_STRING Name;
726 PSID Sid;
727 } LSA_TRUST_INFORMATION,*PLSA_TRUST_INFORMATION;
728
729 typedef struct _LSA_REFERENCED_DOMAIN_LIST {
730 ULONG Entries;
731 PLSA_TRUST_INFORMATION Domains;
732 } LSA_REFERENCED_DOMAIN_LIST,*PLSA_REFERENCED_DOMAIN_LIST;
733
734 typedef struct _LSA_TRANSLATED_SID {
735 SID_NAME_USE Use;
736 ULONG RelativeId;
737 LONG DomainIndex;
738 } LSA_TRANSLATED_SID,*PLSA_TRANSLATED_SID;
739
740 typedef struct _LSA_TRANSLATED_SID2 {
741 SID_NAME_USE Use;
742 PSID Sid;
743 LONG DomainIndex;
744 ULONG Flags;
745 } LSA_TRANSLATED_SID2,*PLSA_TRANSLATED_SID2;
746
747 typedef struct _LSA_TRANSLATED_NAME {
748 SID_NAME_USE Use;
749 LSA_UNICODE_STRING Name;
750 LONG DomainIndex;
751 } LSA_TRANSLATED_NAME,*PLSA_TRANSLATED_NAME;
752
753 typedef enum _POLICY_LSA_SERVER_ROLE {
754 PolicyServerRoleBackup = 2,PolicyServerRolePrimary
755 } POLICY_LSA_SERVER_ROLE,*PPOLICY_LSA_SERVER_ROLE;
756
757 typedef ULONG POLICY_AUDIT_EVENT_OPTIONS,*PPOLICY_AUDIT_EVENT_OPTIONS;
758
759 typedef enum _POLICY_INFORMATION_CLASS {
760 PolicyAuditLogInformation = 1,
761 PolicyAuditEventsInformation,
762 PolicyPrimaryDomainInformation,
763 PolicyPdAccountInformation,
764 PolicyAccountDomainInformation,
765 PolicyLsaServerRoleInformation,
766 PolicyReplicaSourceInformation,
767 PolicyDefaultQuotaInformation,
768 PolicyModificationInformation,
769 PolicyAuditFullSetInformation,
770 PolicyAuditFullQueryInformation,
771 PolicyDnsDomainInformation,
772 PolicyDnsDomainInformationInt,
773 PolicyLocalAccountDomainInformation,
774 PolicyMachineAccountInformation,
775 PolicyMachineAccountInformation2,
776 PolicyLastEntry
777 } POLICY_INFORMATION_CLASS, *PPOLICY_INFORMATION_CLASS;
778
779 typedef struct _POLICY_AUDIT_LOG_INFO {
780 ULONG AuditLogPercentFull;
781 ULONG MaximumLogSize;
782 LARGE_INTEGER AuditRetentionPeriod;
783 BOOLEAN AuditLogFullShutdownInProgress;
784 LARGE_INTEGER TimeToShutdown;
785 ULONG NextAuditRecordId;
786 } POLICY_AUDIT_LOG_INFO,*PPOLICY_AUDIT_LOG_INFO;
787
788 typedef struct _POLICY_AUDIT_EVENTS_INFO {
789 BOOLEAN AuditingMode;
790 PPOLICY_AUDIT_EVENT_OPTIONS EventAuditingOptions;
791 ULONG MaximumAuditEventCount;
792 } POLICY_AUDIT_EVENTS_INFO,*PPOLICY_AUDIT_EVENTS_INFO;
793
794 typedef struct _POLICY_AUDIT_SUBCATEGORIES_INFO {
795 ULONG MaximumSubCategoryCount;
796 PPOLICY_AUDIT_EVENT_OPTIONS EventAuditingOptions;
797 } POLICY_AUDIT_SUBCATEGORIES_INFO, *PPOLICY_AUDIT_SUBCATEGORIES_INFO;
798
799 typedef struct _POLICY_AUDIT_CATEGORIES_INFO {
800 ULONG MaximumCategoryCount;
801 PPOLICY_AUDIT_SUBCATEGORIES_INFO SubCategoriesInfo;
802 } POLICY_AUDIT_CATEGORIES_INFO, *PPOLICY_AUDIT_CATEGORIES_INFO;
803
804 typedef struct _POLICY_ACCOUNT_DOMAIN_INFO {
805 LSA_UNICODE_STRING DomainName;
806 PSID DomainSid;
807 } POLICY_ACCOUNT_DOMAIN_INFO,*PPOLICY_ACCOUNT_DOMAIN_INFO;
808
809 typedef struct _POLICY_PRIMARY_DOMAIN_INFO {
810 LSA_UNICODE_STRING Name;
811 PSID Sid;
812 } POLICY_PRIMARY_DOMAIN_INFO,*PPOLICY_PRIMARY_DOMAIN_INFO;
813
814 typedef struct _POLICY_DNS_DOMAIN_INFO {
815 LSA_UNICODE_STRING Name;
816 LSA_UNICODE_STRING DnsDomainName;
817 LSA_UNICODE_STRING DnsForestName;
818 GUID DomainGuid;
819 PSID Sid;
820 } POLICY_DNS_DOMAIN_INFO,*PPOLICY_DNS_DOMAIN_INFO;
821
822 typedef struct _POLICY_PD_ACCOUNT_INFO {
823 LSA_UNICODE_STRING Name;
824 } POLICY_PD_ACCOUNT_INFO,*PPOLICY_PD_ACCOUNT_INFO;
825
826 typedef struct _POLICY_LSA_SERVER_ROLE_INFO {
827 POLICY_LSA_SERVER_ROLE LsaServerRole;
828 } POLICY_LSA_SERVER_ROLE_INFO,*PPOLICY_LSA_SERVER_ROLE_INFO;
829
830 typedef struct _POLICY_REPLICA_SOURCE_INFO {
831 LSA_UNICODE_STRING ReplicaSource;
832 LSA_UNICODE_STRING ReplicaAccountName;
833 } POLICY_REPLICA_SOURCE_INFO,*PPOLICY_REPLICA_SOURCE_INFO;
834
835 typedef struct _POLICY_DEFAULT_QUOTA_INFO {
836 QUOTA_LIMITS QuotaLimits;
837 } POLICY_DEFAULT_QUOTA_INFO,*PPOLICY_DEFAULT_QUOTA_INFO;
838
839 typedef struct _POLICY_MODIFICATION_INFO {
840 LARGE_INTEGER ModifiedId;
841 LARGE_INTEGER DatabaseCreationTime;
842 } POLICY_MODIFICATION_INFO,*PPOLICY_MODIFICATION_INFO;
843
844 typedef struct _POLICY_AUDIT_FULL_SET_INFO {
845 BOOLEAN ShutDownOnFull;
846 } POLICY_AUDIT_FULL_SET_INFO,*PPOLICY_AUDIT_FULL_SET_INFO;
847
848 typedef struct _POLICY_AUDIT_FULL_QUERY_INFO {
849 BOOLEAN ShutDownOnFull;
850 BOOLEAN LogIsFull;
851 } POLICY_AUDIT_FULL_QUERY_INFO,*PPOLICY_AUDIT_FULL_QUERY_INFO;
852
853 typedef enum _POLICY_DOMAIN_INFORMATION_CLASS {
854#if _WIN32_WINNT <= 0x0500
855 PolicyDomainQualityOfServiceInformation = 1,
856#endif
857 PolicyDomainEfsInformation = 2
858 ,PolicyDomainKerberosTicketInformation
859 } POLICY_DOMAIN_INFORMATION_CLASS, *PPOLICY_DOMAIN_INFORMATION_CLASS;
860
861 typedef struct _POLICY_DOMAIN_EFS_INFO {
862 ULONG InfoLength;
863 PUCHAR EfsBlob;
864 } POLICY_DOMAIN_EFS_INFO,*PPOLICY_DOMAIN_EFS_INFO;
865
866#define POLICY_KERBEROS_VALIDATE_CLIENT 0x00000080
867
868 typedef struct _POLICY_DOMAIN_KERBEROS_TICKET_INFO {
869 ULONG AuthenticationOptions;
870 LARGE_INTEGER MaxServiceTicketAge;
871 LARGE_INTEGER MaxTicketAge;
872 LARGE_INTEGER MaxRenewAge;
873 LARGE_INTEGER MaxClockSkew;
874 LARGE_INTEGER Reserved;
875 } POLICY_DOMAIN_KERBEROS_TICKET_INFO,*PPOLICY_DOMAIN_KERBEROS_TICKET_INFO;
876
877 typedef struct _POLICY_MACHINE_ACCT_INFO {
878 ULONG Rid;
879 PSID Sid;
880 } POLICY_MACHINE_ACCT_INFO, *PPOLICY_MACHINE_ACCT_INFO;
881
882 typedef struct _POLICY_MACHINE_ACCT_INFO2 {
883 ULONG Rid;
884 PSID Sid;
885 GUID ObjectGuid;
886 } POLICY_MACHINE_ACCT_INFO2, *PPOLICY_MACHINE_ACCT_INFO2;
887
888 typedef enum _POLICY_NOTIFICATION_INFORMATION_CLASS {
889 PolicyNotifyAuditEventsInformation = 1,
890 PolicyNotifyAccountDomainInformation,
891 PolicyNotifyServerRoleInformation,
892 PolicyNotifyDnsDomainInformation,
893 PolicyNotifyDomainEfsInformation,
894 PolicyNotifyDomainKerberosTicketInformation,
895 PolicyNotifyMachineAccountPasswordInformation,
896 PolicyNotifyGlobalSaclInformation,
897 PolicyNotifyMax
898 } POLICY_NOTIFICATION_INFORMATION_CLASS, *PPOLICY_NOTIFICATION_INFORMATION_CLASS;
899
900 typedef PVOID LSA_HANDLE,*PLSA_HANDLE;
901
902#define LSAD_AES_CRYPT_SHA512_HASH_SIZE 64
903#define LSAD_AES_KEY_SIZE 16
904#define LSAD_AES_SALT_SIZE 16
905#define LSAD_AES_BLOCK_SIZE 16
906
907 typedef enum _TRUSTED_INFORMATION_CLASS {
908 TrustedDomainNameInformation = 1,
909 TrustedControllersInformation,
910 TrustedPosixOffsetInformation,
911 TrustedPasswordInformation,
912 TrustedDomainInformationBasic,
913 TrustedDomainInformationEx,
914 TrustedDomainAuthInformation,
915 TrustedDomainFullInformation,
916 TrustedDomainAuthInformationInternal,
917 TrustedDomainFullInformationInternal,
918 TrustedDomainInformationEx2Internal,
919 TrustedDomainFullInformation2Internal,
920 TrustedDomainSupportedEncryptionTypes,
921 TrustedDomainAuthInformationInternalAes,
922 TrustedDomainFullInformationInternalAes
923 } TRUSTED_INFORMATION_CLASS,*PTRUSTED_INFORMATION_CLASS;
924
925 typedef struct _TRUSTED_DOMAIN_NAME_INFO {
926 LSA_UNICODE_STRING Name;
927 } TRUSTED_DOMAIN_NAME_INFO,*PTRUSTED_DOMAIN_NAME_INFO;
928
929 typedef struct _TRUSTED_CONTROLLERS_INFO {
930 ULONG Entries;
931 PLSA_UNICODE_STRING Names;
932 } TRUSTED_CONTROLLERS_INFO,*PTRUSTED_CONTROLLERS_INFO;
933
934 typedef struct _TRUSTED_POSIX_OFFSET_INFO {
935 ULONG Offset;
936 } TRUSTED_POSIX_OFFSET_INFO,*PTRUSTED_POSIX_OFFSET_INFO;
937
938 typedef struct _TRUSTED_PASSWORD_INFO {
939 LSA_UNICODE_STRING Password;
940 LSA_UNICODE_STRING OldPassword;
941 } TRUSTED_PASSWORD_INFO,*PTRUSTED_PASSWORD_INFO;
942
943 typedef LSA_TRUST_INFORMATION TRUSTED_DOMAIN_INFORMATION_BASIC;
944 typedef PLSA_TRUST_INFORMATION PTRUSTED_DOMAIN_INFORMATION_BASIC;
945
946#define TRUST_DIRECTION_DISABLED 0x00000000
947#define TRUST_DIRECTION_INBOUND 0x00000001
948#define TRUST_DIRECTION_OUTBOUND 0x00000002
949#define TRUST_DIRECTION_BIDIRECTIONAL (TRUST_DIRECTION_INBOUND | TRUST_DIRECTION_OUTBOUND)
950
951#define TRUST_TYPE_DOWNLEVEL 0x00000001
952#define TRUST_TYPE_UPLEVEL 0x00000002
953#define TRUST_TYPE_MIT 0x00000003
954#define TRUST_TYPE_AAD 0x00000005
955
956#define TRUST_ATTRIBUTE_NON_TRANSITIVE 0x00000001
957#define TRUST_ATTRIBUTE_UPLEVEL_ONLY 0x00000002
958#define TRUST_ATTRIBUTE_QUARANTINED_DOMAIN 0x00000004
959#define TRUST_ATTRIBUTE_FOREST_TRANSITIVE 0x00000008
960#define TRUST_ATTRIBUTE_CROSS_ORGANIZATION 0x00000010
961#define TRUST_ATTRIBUTE_WITHIN_FOREST 0x00000020
962#define TRUST_ATTRIBUTE_TREAT_AS_EXTERNAL 0x00000040
963
964#if _WIN32_WINNT >= 0x0600
965#define TRUST_ATTRIBUTE_TRUST_USES_RC4_ENCRYPTION 0x00000080
966#define TRUST_ATTRIBUTE_TRUST_USES_AES_KEYS 0x00000100
967#endif
968
969#if _WIN32_WINNT >= 0x0602
970#define TRUST_ATTRIBUTE_CROSS_ORGANIZATION_NO_TGT_DELEGATION 0x00000200
971#define TRUST_ATTRIBUTE_PIM_TRUST 0x00000400
972#endif
973
974#if _WIN32_WINNT >= 0x0603
975#define TRUST_ATTRIBUTE_CROSS_ORGANIZATION_ENABLE_TGT_DELEGATION 0x00000800
976#endif
977
978#define TRUST_ATTRIBUTES_VALID 0xFF03FFFF
979#define TRUST_ATTRIBUTES_USER 0xFF000000
980
981 typedef struct _TRUSTED_DOMAIN_INFORMATION_EX {
982 LSA_UNICODE_STRING Name;
983 LSA_UNICODE_STRING FlatName;
984 PSID Sid;
985 ULONG TrustDirection;
986 ULONG TrustType;
987 ULONG TrustAttributes;
988 } TRUSTED_DOMAIN_INFORMATION_EX,*PTRUSTED_DOMAIN_INFORMATION_EX;
989
990 typedef struct _TRUSTED_DOMAIN_INFORMATION_EX2 {
991 LSA_UNICODE_STRING Name;
992 LSA_UNICODE_STRING FlatName;
993 PSID Sid;
994 ULONG TrustDirection;
995 ULONG TrustType;
996 ULONG TrustAttributes;
997 ULONG ForestTrustLength;
998 PUCHAR ForestTrustInfo;
999 } TRUSTED_DOMAIN_INFORMATION_EX2,*PTRUSTED_DOMAIN_INFORMATION_EX2;
1000
1001#define TRUST_AUTH_TYPE_NONE 0
1002#define TRUST_AUTH_TYPE_NT4OWF 1
1003#define TRUST_AUTH_TYPE_CLEAR 2
1004#define TRUST_AUTH_TYPE_VERSION 3
1005
1006 typedef struct _LSA_AUTH_INFORMATION {
1007 LARGE_INTEGER LastUpdateTime;
1008 ULONG AuthType;
1009 ULONG AuthInfoLength;
1010 PUCHAR AuthInfo;
1011 } LSA_AUTH_INFORMATION,*PLSA_AUTH_INFORMATION;
1012
1013 typedef struct _TRUSTED_DOMAIN_AUTH_INFORMATION {
1014 ULONG IncomingAuthInfos;
1015 PLSA_AUTH_INFORMATION IncomingAuthenticationInformation;
1016 PLSA_AUTH_INFORMATION IncomingPreviousAuthenticationInformation;
1017 ULONG OutgoingAuthInfos;
1018 PLSA_AUTH_INFORMATION OutgoingAuthenticationInformation;
1019 PLSA_AUTH_INFORMATION OutgoingPreviousAuthenticationInformation;
1020 } TRUSTED_DOMAIN_AUTH_INFORMATION,*PTRUSTED_DOMAIN_AUTH_INFORMATION;
1021
1022 typedef struct _TRUSTED_DOMAIN_FULL_INFORMATION {
1023 TRUSTED_DOMAIN_INFORMATION_EX Information;
1024 TRUSTED_POSIX_OFFSET_INFO PosixOffset;
1025 TRUSTED_DOMAIN_AUTH_INFORMATION AuthInformation;
1026 } TRUSTED_DOMAIN_FULL_INFORMATION,*PTRUSTED_DOMAIN_FULL_INFORMATION;
1027
1028 typedef struct _TRUSTED_DOMAIN_FULL_INFORMATION2 {
1029 TRUSTED_DOMAIN_INFORMATION_EX2 Information;
1030 TRUSTED_POSIX_OFFSET_INFO PosixOffset;
1031 TRUSTED_DOMAIN_AUTH_INFORMATION AuthInformation;
1032 } TRUSTED_DOMAIN_FULL_INFORMATION2,*PTRUSTED_DOMAIN_FULL_INFORMATION2;
1033
1034 typedef struct _TRUSTED_DOMAIN_SUPPORTED_ENCRYPTION_TYPES {
1035 ULONG SupportedEncryptionTypes;
1036 } TRUSTED_DOMAIN_SUPPORTED_ENCRYPTION_TYPES,*PTRUSTED_DOMAIN_SUPPORTED_ENCRYPTION_TYPES;
1037
1038 typedef enum {
1039 ForestTrustTopLevelName,
1040 ForestTrustTopLevelNameEx,
1041 ForestTrustDomainInfo,
1042 ForestTrustBinaryInfo,
1043 ForestTrustScannerInfo,
1044 ForestTrustRecordTypeLast = ForestTrustScannerInfo
1045 } LSA_FOREST_TRUST_RECORD_TYPE;
1046
1047#define LSA_FTRECORD_DISABLED_REASONS (__MSABI_LONG(0x0000FFFF))
1048
1049#define LSA_TLN_DISABLED_NEW (__MSABI_LONG(0x00000001))
1050#define LSA_TLN_DISABLED_ADMIN (__MSABI_LONG(0x00000002))
1051#define LSA_TLN_DISABLED_CONFLICT (__MSABI_LONG(0x00000004))
1052
1053#define LSA_SID_DISABLED_ADMIN (__MSABI_LONG(0x00000001))
1054#define LSA_SID_DISABLED_CONFLICT (__MSABI_LONG(0x00000002))
1055#define LSA_NB_DISABLED_ADMIN (__MSABI_LONG(0x00000004))
1056#define LSA_NB_DISABLED_CONFLICT (__MSABI_LONG(0x00000008))
1057
1058#define LSA_SCANNER_INFO_DISABLE_AUTH_TARGET_VALIDATION (__MSABI_LONG(0x00000001))
1059#define LSA_SCANNER_INFO_ADMIN_ALL_FLAGS (LSA_SCANNER_INFO_DISABLE_AUTH_TARGET_VALIDATION)
1060
1061 typedef struct _LSA_FOREST_TRUST_DOMAIN_INFO {
1062 PSID Sid;
1063 LSA_UNICODE_STRING DnsName;
1064 LSA_UNICODE_STRING NetbiosName;
1065 } LSA_FOREST_TRUST_DOMAIN_INFO,*PLSA_FOREST_TRUST_DOMAIN_INFO;
1066
1067 typedef struct _LSA_FOREST_TRUST_SCANNER_INFO {
1068#ifdef __WIDL__
1069 [unique] PISID DomainSid;
1070#else
1071 PSID DomainSid;
1072#endif
1073 LSA_UNICODE_STRING DnsName;
1074 LSA_UNICODE_STRING NetbiosName;
1075 } LSA_FOREST_TRUST_SCANNER_INFO,*PLSA_FOREST_TRUST_SCANNER_INFO;
1076
1077#define MAX_FOREST_TRUST_BINARY_DATA_SIZE (128*1024)
1078
1079 typedef struct _LSA_FOREST_TRUST_BINARY_DATA {
1080 ULONG Length;
1081 PUCHAR Buffer;
1082 } LSA_FOREST_TRUST_BINARY_DATA,*PLSA_FOREST_TRUST_BINARY_DATA;
1083
1084 typedef struct _LSA_FOREST_TRUST_RECORD {
1085 ULONG Flags;
1086 LSA_FOREST_TRUST_RECORD_TYPE ForestTrustType;
1087 LARGE_INTEGER Time;
1088 union {
1089 LSA_UNICODE_STRING TopLevelName;
1090 LSA_FOREST_TRUST_DOMAIN_INFO DomainInfo;
1091 LSA_FOREST_TRUST_BINARY_DATA Data;
1092 } ForestTrustData;
1093 } LSA_FOREST_TRUST_RECORD,*PLSA_FOREST_TRUST_RECORD;
1094
1095 typedef struct _LSA_FOREST_TRUST_RECORD2 {
1096 ULONG Flags;
1097 LSA_FOREST_TRUST_RECORD_TYPE ForestTrustType;
1098 LARGE_INTEGER Time;
1099#ifdef __WIDL__
1100 [switch_type(LSA_FOREST_TRUST_RECORD_TYPE), switch_is(ForestTrustType)]
1101#endif
1102 union {
1103#ifdef __WIDL__
1104 [case(ForestTrustTopLevelName, ForestTrustTopLevelNameEx)] LSA_UNICODE_STRING TopLevelName;
1105 [case(ForestTrustDomainInfo)] LSA_FOREST_TRUST_DOMAIN_INFO DomainInfo;
1106 [case(ForestTrustBinaryInfo)] LSA_FOREST_TRUST_BINARY_DATA BinaryData;
1107 [case(ForestTrustScannerInfo)] LSA_FOREST_TRUST_SCANNER_INFO ScannerInfo;
1108#else
1109 LSA_UNICODE_STRING TopLevelName;
1110 LSA_FOREST_TRUST_DOMAIN_INFO DomainInfo;
1111 LSA_FOREST_TRUST_BINARY_DATA BinaryData;
1112 LSA_FOREST_TRUST_SCANNER_INFO ScannerInfo;
1113#endif
1114 } ForestTrustData;
1115 } LSA_FOREST_TRUST_RECORD2,*PLSA_FOREST_TRUST_RECORD2;
1116
1117#define MAX_RECORDS_IN_FOREST_TRUST_INFO 4000
1118
1119 typedef struct _LSA_FOREST_TRUST_INFORMATION {
1120 ULONG RecordCount;
1121 PLSA_FOREST_TRUST_RECORD *Entries;
1122 } LSA_FOREST_TRUST_INFORMATION,*PLSA_FOREST_TRUST_INFORMATION;
1123
1124 typedef struct _LSA_FOREST_TRUST_INFORMATION2 {
1125#ifdef __WIDL__
1126 [range(0, MAX_RECORDS_IN_FOREST_TRUST_INFO)] ULONG RecordCount;
1127 [size_is(RecordCount)] PLSA_FOREST_TRUST_RECORD2 *Entries;
1128#else
1129 ULONG RecordCount;
1130 PLSA_FOREST_TRUST_RECORD2 *Entries;
1131#endif
1132 } LSA_FOREST_TRUST_INFORMATION2,*PLSA_FOREST_TRUST_INFORMATION2;
1133
1134 typedef enum {
1135 CollisionTdo,CollisionXref,CollisionOther
1136 } LSA_FOREST_TRUST_COLLISION_RECORD_TYPE;
1137
1138 typedef struct _LSA_FOREST_TRUST_COLLISION_RECORD {
1139 ULONG Index;
1140 LSA_FOREST_TRUST_COLLISION_RECORD_TYPE Type;
1141 ULONG Flags;
1142 LSA_UNICODE_STRING Name;
1143 } LSA_FOREST_TRUST_COLLISION_RECORD,*PLSA_FOREST_TRUST_COLLISION_RECORD;
1144
1145 typedef struct _LSA_FOREST_TRUST_COLLISION_INFORMATION {
1146 ULONG RecordCount;
1147 PLSA_FOREST_TRUST_COLLISION_RECORD *Entries;
1148 } LSA_FOREST_TRUST_COLLISION_INFORMATION,*PLSA_FOREST_TRUST_COLLISION_INFORMATION;
1149
1150 typedef ULONG LSA_ENUMERATION_HANDLE,*PLSA_ENUMERATION_HANDLE;
1151
1152 typedef struct _LSA_ENUMERATION_INFORMATION {
1153 PSID Sid;
1154 } LSA_ENUMERATION_INFORMATION,*PLSA_ENUMERATION_INFORMATION;
1155
1156 NTSTATUS NTAPI LsaFreeMemory(PVOID Buffer);
1157 NTSTATUS NTAPI LsaClose(LSA_HANDLE ObjectHandle);
1158
1159 #if (_WIN32_WINNT >= 0x0600)
1160 typedef struct _LSA_LAST_INTER_LOGON_INFO {
1161 LARGE_INTEGER LastSuccessfulLogon;
1162 LARGE_INTEGER LastFailedLogon;
1163 ULONG FailedAttemptCountSinceLastSuccessfulLogon;
1164 } LSA_LAST_INTER_LOGON_INFO,*PLSA_LAST_INTER_LOGON_INFO;
1165 #endif
1166
1167 typedef struct _SECURITY_LOGON_SESSION_DATA {
1168 ULONG Size;
1169 LUID LogonId;
1170 LSA_UNICODE_STRING UserName;
1171 LSA_UNICODE_STRING LogonDomain;
1172 LSA_UNICODE_STRING AuthenticationPackage;
1173 ULONG LogonType;
1174 ULONG Session;
1175 PSID Sid;
1176 LARGE_INTEGER LogonTime;
1177 LSA_UNICODE_STRING LogonServer;
1178 LSA_UNICODE_STRING DnsDomainName;
1179 LSA_UNICODE_STRING Upn;
1180 #if (_WIN32_WINNT >= 0x0600)
1181 ULONG UserFlags;
1182 LSA_LAST_INTER_LOGON_INFO LastLogonInfo;
1183 LSA_UNICODE_STRING LogonScript;
1184 LSA_UNICODE_STRING ProfilePath;
1185 LSA_UNICODE_STRING HomeDirectory;
1186 LSA_UNICODE_STRING HomeDirectoryDrive;
1187 LARGE_INTEGER LogoffTime;
1188 LARGE_INTEGER KickOffTime;
1189 LARGE_INTEGER PasswordLastSet;
1190 LARGE_INTEGER PasswordCanChange;
1191 LARGE_INTEGER PasswordMustChange;
1192 #endif
1193 } SECURITY_LOGON_SESSION_DATA,*PSECURITY_LOGON_SESSION_DATA;
1194
1195 NTSTATUS NTAPI LsaEnumerateLogonSessions(PULONG LogonSessionCount,PLUID *LogonSessionList);
1196 NTSTATUS NTAPI LsaGetLogonSessionData(PLUID LogonId,PSECURITY_LOGON_SESSION_DATA *ppLogonSessionData);
1197 NTSTATUS NTAPI LsaOpenPolicy(PLSA_UNICODE_STRING SystemName,PLSA_OBJECT_ATTRIBUTES ObjectAttributes,ACCESS_MASK DesiredAccess,PLSA_HANDLE PolicyHandle);
1198 NTSTATUS NTAPI LsaQueryInformationPolicy(LSA_HANDLE PolicyHandle,POLICY_INFORMATION_CLASS InformationClass,PVOID *Buffer);
1199 NTSTATUS NTAPI LsaSetInformationPolicy(LSA_HANDLE PolicyHandle,POLICY_INFORMATION_CLASS InformationClass,PVOID Buffer);
1200 NTSTATUS NTAPI LsaQueryDomainInformationPolicy(LSA_HANDLE PolicyHandle,POLICY_DOMAIN_INFORMATION_CLASS InformationClass,PVOID *Buffer);
1201 NTSTATUS NTAPI LsaSetDomainInformationPolicy(LSA_HANDLE PolicyHandle,POLICY_DOMAIN_INFORMATION_CLASS InformationClass,PVOID Buffer);
1202 NTSTATUS NTAPI LsaRegisterPolicyChangeNotification(POLICY_NOTIFICATION_INFORMATION_CLASS InformationClass,HANDLE NotificationEventHandle);
1203 NTSTATUS NTAPI LsaUnregisterPolicyChangeNotification(POLICY_NOTIFICATION_INFORMATION_CLASS InformationClass,HANDLE NotificationEventHandle);
1204 NTSTATUS NTAPI LsaEnumerateTrustedDomains(LSA_HANDLE PolicyHandle,PLSA_ENUMERATION_HANDLE EnumerationContext,PVOID *Buffer,ULONG PreferedMaximumLength,PULONG CountReturned);
1205 NTSTATUS NTAPI LsaLookupNames(LSA_HANDLE PolicyHandle,ULONG Count,PLSA_UNICODE_STRING Names,PLSA_REFERENCED_DOMAIN_LIST *ReferencedDomains,PLSA_TRANSLATED_SID *Sids);
1206 NTSTATUS NTAPI LsaLookupNames2(LSA_HANDLE PolicyHandle,ULONG Flags,ULONG Count,PLSA_UNICODE_STRING Names,PLSA_REFERENCED_DOMAIN_LIST *ReferencedDomains,PLSA_TRANSLATED_SID2 *Sids);
1207 NTSTATUS NTAPI LsaLookupSids(LSA_HANDLE PolicyHandle,ULONG Count,PSID *Sids,PLSA_REFERENCED_DOMAIN_LIST *ReferencedDomains,PLSA_TRANSLATED_NAME *Names);
1208 NTSTATUS NTAPI LsaLookupSids2(LSA_HANDLE PolicyHandle,ULONG LookupOptions,ULONG Count,PSID *Sids,PLSA_REFERENCED_DOMAIN_LIST *ReferencedDomains,PLSA_TRANSLATED_NAME *Names);
1209 NTSTATUS NTAPI LsaSetCAPs(PLSA_UNICODE_STRING CAPDNs,ULONG CAPDNCount,ULONG Flags);
1210 NTSTATUS NTAPI LsaGetAppliedCAPIDs(PLSA_UNICODE_STRING SystemName,PSID **CAPIDs,PULONG CAPIDCount);
1211
1212 #define MAXIMUM_CAPES_PER_CAP 0x7f
1213
1214 #define CENTRAL_ACCESS_POLICY_OWNER_RIGHTS_PRESENT_FLAG 0x00000001
1215 #define CENTRAL_ACCESS_POLICY_STAGED_OWNER_RIGHTS_PRESENT_FLAG 0x00000100
1216 #define CENTRAL_ACCESS_POLICY_STAGED_FLAG 0x00010000
1217 #define STAGING_FLAG(Effective) ((Effective & 0xf) << 8)
1218
1219 #define CENTRAL_ACCESS_POLICY_VALID_FLAG_MASK (CENTRAL_ACCESS_POLICY_OWNER_RIGHTS_PRESENT_FLAG | \
1220 CENTRAL_ACCESS_POLICY_STAGED_OWNER_RIGHTS_PRESENT_FLAG | \
1221 CENTRAL_ACCESS_POLICY_STAGED_FLAG)
1222
1223 #define LSASETCAPS_RELOAD_FLAG 0x00000001
1224 #define LSASETCAPS_VALID_FLAG_MASK LSASETCAPS_RELOAD_FLAG
1225
1226 typedef struct _CENTRAL_ACCESS_POLICY_ENTRY {
1227 LSA_UNICODE_STRING Name;
1228 LSA_UNICODE_STRING Description;
1229 LSA_UNICODE_STRING ChangeId;
1230 ULONG LengthAppliesTo;
1231 PUCHAR AppliesTo;
1232 ULONG LengthSD;
1233 PSECURITY_DESCRIPTOR SD;
1234 ULONG LengthStagedSD;
1235 PSECURITY_DESCRIPTOR StagedSD;
1236 ULONG Flags;
1237 } CENTRAL_ACCESS_POLICY_ENTRY, *PCENTRAL_ACCESS_POLICY_ENTRY;
1238
1239 typedef const CENTRAL_ACCESS_POLICY_ENTRY *PCCENTRAL_ACCESS_POLICY_ENTRY;
1240
1241 typedef struct _CENTRAL_ACCESS_POLICY {
1242 PSID CAPID;
1243 LSA_UNICODE_STRING Name;
1244 LSA_UNICODE_STRING Description;
1245 LSA_UNICODE_STRING ChangeId;
1246 ULONG Flags;
1247 ULONG CAPECount;
1248 PCENTRAL_ACCESS_POLICY_ENTRY *CAPEs;
1249 } CENTRAL_ACCESS_POLICY, *PCENTRAL_ACCESS_POLICY;
1250
1251 typedef const CENTRAL_ACCESS_POLICY *PCCENTRAL_ACCESS_POLICY;
1252
1253 NTSTATUS NTAPI LsaQueryCAPs(PSID *CAPIDs,ULONG CAPIDCount,PCENTRAL_ACCESS_POLICY *CAPs,PULONG CAPCount);
1254
1255#define SE_INTERACTIVE_LOGON_NAME TEXT("SeInteractiveLogonRight")
1256#define SE_NETWORK_LOGON_NAME TEXT("SeNetworkLogonRight")
1257#define SE_BATCH_LOGON_NAME TEXT("SeBatchLogonRight")
1258#define SE_SERVICE_LOGON_NAME TEXT("SeServiceLogonRight")
1259#define SE_DENY_INTERACTIVE_LOGON_NAME TEXT("SeDenyInteractiveLogonRight")
1260#define SE_DENY_NETWORK_LOGON_NAME TEXT("SeDenyNetworkLogonRight")
1261#define SE_DENY_BATCH_LOGON_NAME TEXT("SeDenyBatchLogonRight")
1262#define SE_DENY_SERVICE_LOGON_NAME TEXT("SeDenyServiceLogonRight")
1263#define SE_REMOTE_INTERACTIVE_LOGON_NAME TEXT("SeRemoteInteractiveLogonRight")
1264#define SE_DENY_REMOTE_INTERACTIVE_LOGON_NAME TEXT("SeDenyRemoteInteractiveLogonRight")
1265
1266 NTSTATUS NTAPI LsaEnumerateAccountsWithUserRight(LSA_HANDLE PolicyHandle,PLSA_UNICODE_STRING UserRight,PVOID *Buffer,PULONG CountReturned);
1267 NTSTATUS NTAPI LsaEnumerateAccountRights(LSA_HANDLE PolicyHandle,PSID AccountSid,PLSA_UNICODE_STRING *UserRights,PULONG CountOfRights);
1268 NTSTATUS NTAPI LsaAddAccountRights(LSA_HANDLE PolicyHandle,PSID AccountSid,PLSA_UNICODE_STRING UserRights,ULONG CountOfRights);
1269 NTSTATUS NTAPI LsaRemoveAccountRights(LSA_HANDLE PolicyHandle,PSID AccountSid,BOOLEAN AllRights,PLSA_UNICODE_STRING UserRights,ULONG CountOfRights);
1270 NTSTATUS NTAPI LsaOpenTrustedDomainByName(LSA_HANDLE PolicyHandle,PLSA_UNICODE_STRING TrustedDomainName,ACCESS_MASK DesiredAccess,PLSA_HANDLE TrustedDomainHandle);
1271 NTSTATUS NTAPI LsaQueryTrustedDomainInfo(LSA_HANDLE PolicyHandle,PSID TrustedDomainSid,TRUSTED_INFORMATION_CLASS InformationClass,PVOID *Buffer);
1272 NTSTATUS NTAPI LsaSetTrustedDomainInformation(LSA_HANDLE PolicyHandle,PSID TrustedDomainSid,TRUSTED_INFORMATION_CLASS InformationClass,PVOID Buffer);
1273 NTSTATUS NTAPI LsaDeleteTrustedDomain(LSA_HANDLE PolicyHandle,PSID TrustedDomainSid);
1274 NTSTATUS NTAPI LsaQueryTrustedDomainInfoByName(LSA_HANDLE PolicyHandle,PLSA_UNICODE_STRING TrustedDomainName,TRUSTED_INFORMATION_CLASS InformationClass,PVOID *Buffer);
1275 NTSTATUS NTAPI LsaSetTrustedDomainInfoByName(LSA_HANDLE PolicyHandle,PLSA_UNICODE_STRING TrustedDomainName,TRUSTED_INFORMATION_CLASS InformationClass,PVOID Buffer);
1276 NTSTATUS NTAPI LsaEnumerateTrustedDomainsEx(LSA_HANDLE PolicyHandle,PLSA_ENUMERATION_HANDLE EnumerationContext,PVOID *Buffer,ULONG PreferedMaximumLength,PULONG CountReturned);
1277 NTSTATUS NTAPI LsaCreateTrustedDomainEx(LSA_HANDLE PolicyHandle,PTRUSTED_DOMAIN_INFORMATION_EX TrustedDomainInformation,PTRUSTED_DOMAIN_AUTH_INFORMATION AuthenticationInformation,ACCESS_MASK DesiredAccess,PLSA_HANDLE TrustedDomainHandle);
1278 NTSTATUS NTAPI LsaQueryForestTrustInformation(LSA_HANDLE PolicyHandle,PLSA_UNICODE_STRING TrustedDomainName,PLSA_FOREST_TRUST_INFORMATION *ForestTrustInfo);
1279 NTSTATUS NTAPI LsaSetForestTrustInformation(LSA_HANDLE PolicyHandle,PLSA_UNICODE_STRING TrustedDomainName,PLSA_FOREST_TRUST_INFORMATION ForestTrustInfo,BOOLEAN CheckOnly,PLSA_FOREST_TRUST_COLLISION_INFORMATION *CollisionInfo);
1280
1281#ifdef TESTING_MATCHING_ROUTINE
1282 NTSTATUS NTAPI LsaForestTrustFindMatch(LSA_HANDLE PolicyHandle,ULONG Type,PLSA_UNICODE_STRING Name,PLSA_UNICODE_STRING *Match);
1283#endif
1284
1285 NTSTATUS NTAPI LsaStorePrivateData(LSA_HANDLE PolicyHandle,PLSA_UNICODE_STRING KeyName,PLSA_UNICODE_STRING PrivateData);
1286 NTSTATUS NTAPI LsaRetrievePrivateData(LSA_HANDLE PolicyHandle,PLSA_UNICODE_STRING KeyName,PLSA_UNICODE_STRING *PrivateData);
1287 ULONG NTAPI LsaNtStatusToWinError(NTSTATUS Status);
1288 NTSTATUS NTAPI LsaQueryForestTrustInformation2(LSA_HANDLE PolicyHandle,PLSA_UNICODE_STRING TrustedDomainName,LSA_FOREST_TRUST_RECORD_TYPE HighestRecordType,PLSA_FOREST_TRUST_INFORMATION2 *ForestTrustInfo);
1289 NTSTATUS NTAPI LsaSetForestTrustInformation2(LSA_HANDLE PolicyHandle,PLSA_UNICODE_STRING TrustedDomainName,LSA_FOREST_TRUST_RECORD_TYPE HighestRecordType,PLSA_FOREST_TRUST_INFORMATION2 ForestTrustInfo,BOOLEAN CheckOnly,PLSA_FOREST_TRUST_COLLISION_INFORMATION *CollisionInfo);
1290
1291#ifndef _NTLSA_IFS_
1292#define _NTLSA_IFS_
1293#endif
1294
1295 enum NEGOTIATE_MESSAGES {
1296 NegEnumPackagePrefixes = 0,
1297 NegGetCallerName = 1,
1298 NegTransferCredentials = 2,
1299 NegMsgReserved1 = 3,
1300 NegCallPackageMax
1301 };
1302
1303#define NEGOTIATE_MAX_PREFIX 32
1304
1305 typedef struct _NEGOTIATE_PACKAGE_PREFIX {
1306 ULONG_PTR PackageId;
1307 PVOID PackageDataA;
1308 PVOID PackageDataW;
1309 ULONG_PTR PrefixLen;
1310 UCHAR Prefix[NEGOTIATE_MAX_PREFIX ];
1311 } NEGOTIATE_PACKAGE_PREFIX,*PNEGOTIATE_PACKAGE_PREFIX;
1312
1313 typedef struct _NEGOTIATE_PACKAGE_PREFIXES {
1314 ULONG MessageType;
1315 ULONG PrefixCount;
1316 ULONG Offset;
1317 ULONG Pad;
1318 } NEGOTIATE_PACKAGE_PREFIXES,*PNEGOTIATE_PACKAGE_PREFIXES;
1319
1320 typedef struct _NEGOTIATE_CALLER_NAME_REQUEST {
1321 ULONG MessageType;
1322 LUID LogonId;
1323 } NEGOTIATE_CALLER_NAME_REQUEST,*PNEGOTIATE_CALLER_NAME_REQUEST;
1324
1325 typedef struct _NEGOTIATE_CALLER_NAME_RESPONSE {
1326 ULONG MessageType;
1327 PWSTR CallerName;
1328 } NEGOTIATE_CALLER_NAME_RESPONSE,*PNEGOTIATE_CALLER_NAME_RESPONSE;
1329
1330#ifndef _NTDEF_
1331#ifndef __UNICODE_STRING_DEFINED
1332#define __UNICODE_STRING_DEFINED
1333 typedef LSA_UNICODE_STRING UNICODE_STRING,*PUNICODE_STRING;
1334#endif
1335#ifndef __STRING_DEFINED
1336#define __STRING_DEFINED
1337 typedef LSA_STRING STRING,*PSTRING;
1338#endif
1339#endif
1340
1341#ifndef _DOMAIN_PASSWORD_INFORMATION_DEFINED
1342#define _DOMAIN_PASSWORD_INFORMATION_DEFINED
1343 typedef struct _DOMAIN_PASSWORD_INFORMATION {
1344 USHORT MinPasswordLength;
1345 USHORT PasswordHistoryLength;
1346 ULONG PasswordProperties;
1347 LARGE_INTEGER MaxPasswordAge;
1348 LARGE_INTEGER MinPasswordAge;
1349 } DOMAIN_PASSWORD_INFORMATION,*PDOMAIN_PASSWORD_INFORMATION;
1350#endif
1351
1352#define DOMAIN_PASSWORD_COMPLEX __MSABI_LONG(0x00000001)
1353#define DOMAIN_PASSWORD_NO_ANON_CHANGE __MSABI_LONG(0x00000002)
1354#define DOMAIN_PASSWORD_NO_CLEAR_CHANGE __MSABI_LONG(0x00000004)
1355#define DOMAIN_LOCKOUT_ADMINS __MSABI_LONG(0x00000008)
1356#define DOMAIN_PASSWORD_STORE_CLEARTEXT __MSABI_LONG(0x00000010)
1357#define DOMAIN_REFUSE_PASSWORD_CHANGE __MSABI_LONG(0x00000020)
1358
1359#if _WIN32_WINNT >= 0x0502
1360#define DOMAIN_NO_LM_OWF_CHANGE __MSABI_LONG(0x00000040)
1361#endif
1362
1363#ifndef _PASSWORD_NOTIFICATION_DEFINED
1364#define _PASSWORD_NOTIFICATION_DEFINED
1365 typedef NTSTATUS (*PSAM_PASSWORD_NOTIFICATION_ROUTINE)(PUNICODE_STRING UserName,ULONG RelativeId,PUNICODE_STRING NewPassword);
1366
1367#define SAM_PASSWORD_CHANGE_NOTIFY_ROUTINE "PasswordChangeNotify"
1368
1369 typedef BOOLEAN (*PSAM_INIT_NOTIFICATION_ROUTINE)();
1370
1371#define SAM_INIT_NOTIFICATION_ROUTINE "InitializeChangeNotify"
1372#define SAM_PASSWORD_FILTER_ROUTINE "PasswordFilter"
1373
1374 typedef BOOLEAN (*PSAM_PASSWORD_FILTER_ROUTINE)(PUNICODE_STRING AccountName,PUNICODE_STRING FullName,PUNICODE_STRING Password,BOOLEAN SetOperation);
1375#endif
1376
1377#define MSV1_0_PACKAGE_NAME "MICROSOFT_AUTHENTICATION_PACKAGE_V1_0"
1378#define MSV1_0_PACKAGE_NAMEW L"MICROSOFT_AUTHENTICATION_PACKAGE_V1_0"
1379#define MSV1_0_PACKAGE_NAMEW_LENGTH sizeof(MSV1_0_PACKAGE_NAMEW) - sizeof(WCHAR)
1380
1381#define MSV1_0_SUBAUTHENTICATION_KEY "SYSTEM\\CurrentControlSet\\Control\\Lsa\\MSV1_0"
1382#define MSV1_0_SUBAUTHENTICATION_VALUE "Auth"
1383
1384 typedef enum _MSV1_0_LOGON_SUBMIT_TYPE {
1385 MsV1_0InteractiveLogon = 2,
1386 MsV1_0Lm20Logon,
1387 MsV1_0NetworkLogon,
1388 MsV1_0SubAuthLogon,
1389 MsV1_0WorkstationUnlockLogon = 7,
1390 MsV1_0S4ULogon = 12,
1391 MsV1_0VirtualLogon = 82,
1392 MsV1_0NoElevationLogon,
1393 MsV1_0LuidLogon
1394 } MSV1_0_LOGON_SUBMIT_TYPE,*PMSV1_0_LOGON_SUBMIT_TYPE;
1395
1396 typedef enum _MSV1_0_PROFILE_BUFFER_TYPE {
1397 MsV1_0InteractiveProfile = 2,MsV1_0Lm20LogonProfile,MsV1_0SmartCardProfile
1398 } MSV1_0_PROFILE_BUFFER_TYPE,*PMSV1_0_PROFILE_BUFFER_TYPE;
1399
1400 typedef struct _MSV1_0_INTERACTIVE_LOGON {
1401 MSV1_0_LOGON_SUBMIT_TYPE MessageType;
1402 UNICODE_STRING LogonDomainName;
1403 UNICODE_STRING UserName;
1404 UNICODE_STRING Password;
1405 } MSV1_0_INTERACTIVE_LOGON,*PMSV1_0_INTERACTIVE_LOGON;
1406
1407 typedef struct _MSV1_0_INTERACTIVE_PROFILE {
1408 MSV1_0_PROFILE_BUFFER_TYPE MessageType;
1409 USHORT LogonCount;
1410 USHORT BadPasswordCount;
1411 LARGE_INTEGER LogonTime;
1412 LARGE_INTEGER LogoffTime;
1413 LARGE_INTEGER KickOffTime;
1414 LARGE_INTEGER PasswordLastSet;
1415 LARGE_INTEGER PasswordCanChange;
1416 LARGE_INTEGER PasswordMustChange;
1417 UNICODE_STRING LogonScript;
1418 UNICODE_STRING HomeDirectory;
1419 UNICODE_STRING FullName;
1420 UNICODE_STRING ProfilePath;
1421 UNICODE_STRING HomeDirectoryDrive;
1422 UNICODE_STRING LogonServer;
1423 ULONG UserFlags;
1424 } MSV1_0_INTERACTIVE_PROFILE,*PMSV1_0_INTERACTIVE_PROFILE;
1425
1426#define MSV1_0_CHALLENGE_LENGTH 8
1427#define MSV1_0_USER_SESSION_KEY_LENGTH 16
1428#define MSV1_0_LANMAN_SESSION_KEY_LENGTH 8
1429
1430#define MSV1_0_CLEARTEXT_PASSWORD_ALLOWED 0x02
1431#define MSV1_0_UPDATE_LOGON_STATISTICS 0x04
1432#define MSV1_0_RETURN_USER_PARAMETERS 0x08
1433#define MSV1_0_DONT_TRY_GUEST_ACCOUNT 0x10
1434#define MSV1_0_ALLOW_SERVER_TRUST_ACCOUNT 0x20
1435#define MSV1_0_RETURN_PASSWORD_EXPIRY 0x40
1436
1437#define MSV1_0_USE_CLIENT_CHALLENGE 0x80
1438#define MSV1_0_TRY_GUEST_ACCOUNT_ONLY 0x100
1439#define MSV1_0_RETURN_PROFILE_PATH 0x200
1440#define MSV1_0_TRY_SPECIFIED_DOMAIN_ONLY 0x400
1441#define MSV1_0_ALLOW_WORKSTATION_TRUST_ACCOUNT 0x800
1442#define MSV1_0_DISABLE_PERSONAL_FALLBACK 0x00001000
1443#define MSV1_0_ALLOW_FORCE_GUEST 0x00002000
1444#define MSV1_0_CLEARTEXT_PASSWORD_SUPPLIED 0x00004000
1445#define MSV1_0_USE_DOMAIN_FOR_ROUTING_ONLY 0x00008000
1446#define MSV1_0_SUBAUTHENTICATION_DLL_EX 0x00100000
1447#define MSV1_0_ALLOW_MSVCHAPV2 0x00010000
1448
1449#if _WIN32_WINNT >= 0x0600
1450#define MSV1_0_S4U2SELF 0x00020000
1451#define MSV1_0_CHECK_LOGONHOURS_FOR_S4U 0x00040000
1452#endif
1453
1454#if _WIN32_WINNT >= 0x0602
1455#define MSV1_0_INTERNET_DOMAIN 0x00080000
1456#endif
1457
1458#define MSV1_0_SUBAUTHENTICATION_DLL 0xFF000000
1459#define MSV1_0_SUBAUTHENTICATION_DLL_SHIFT 24
1460#define MSV1_0_MNS_LOGON 0x01000000
1461
1462#define MSV1_0_SUBAUTHENTICATION_DLL_RAS 2
1463#define MSV1_0_SUBAUTHENTICATION_DLL_IIS 132
1464
1465 typedef struct _MSV1_0_LM20_LOGON {
1466 MSV1_0_LOGON_SUBMIT_TYPE MessageType;
1467 UNICODE_STRING LogonDomainName;
1468 UNICODE_STRING UserName;
1469 UNICODE_STRING Workstation;
1470 UCHAR ChallengeToClient[MSV1_0_CHALLENGE_LENGTH];
1471 STRING CaseSensitiveChallengeResponse;
1472 STRING CaseInsensitiveChallengeResponse;
1473 ULONG ParameterControl;
1474 } MSV1_0_LM20_LOGON,*PMSV1_0_LM20_LOGON;
1475
1476 typedef struct _MSV1_0_SUBAUTH_LOGON{
1477 MSV1_0_LOGON_SUBMIT_TYPE MessageType;
1478 UNICODE_STRING LogonDomainName;
1479 UNICODE_STRING UserName;
1480 UNICODE_STRING Workstation;
1481 UCHAR ChallengeToClient[MSV1_0_CHALLENGE_LENGTH];
1482 STRING AuthenticationInfo1;
1483 STRING AuthenticationInfo2;
1484 ULONG ParameterControl;
1485 ULONG SubAuthPackageId;
1486 } MSV1_0_SUBAUTH_LOGON,*PMSV1_0_SUBAUTH_LOGON;
1487
1488#if _WIN32_WINNT >= 0x0600
1489
1490#define MSV1_0_S4U_LOGON_FLAG_CHECK_LOGONHOURS 0x2
1491
1492 typedef struct _MSV1_0_S4U_LOGON {
1493 MSV1_0_LOGON_SUBMIT_TYPE MessageType;
1494 ULONG Flags;
1495 UNICODE_STRING UserPrincipalName;
1496 UNICODE_STRING DomainName;
1497 } MSV1_0_S4U_LOGON, *PMSV1_0_S4U_LOGON;
1498
1499#endif
1500
1501#define LOGON_GUEST 0x01
1502#define LOGON_NOENCRYPTION 0x02
1503#define LOGON_CACHED_ACCOUNT 0x04
1504#define LOGON_USED_LM_PASSWORD 0x08
1505#define LOGON_EXTRA_SIDS 0x20
1506#define LOGON_SUBAUTH_SESSION_KEY 0x40
1507#define LOGON_SERVER_TRUST_ACCOUNT 0x80
1508#define LOGON_NTLMV2_ENABLED 0x100
1509#define LOGON_RESOURCE_GROUPS 0x200
1510#define LOGON_PROFILE_PATH_RETURNED 0x400
1511#define LOGON_NT_V2 0x800
1512#define LOGON_LM_V2 0x1000
1513#define LOGON_NTLM_V2 0x2000
1514
1515#if _WIN32_WINNT >= 0x0600
1516#define LOGON_OPTIMIZED 0x4000
1517#define LOGON_WINLOGON 0x8000
1518#define LOGON_PKINIT 0x10000
1519#define LOGON_NO_OPTIMIZED 0x20000
1520#endif
1521
1522#if _WIN32_WINNT >= 0x0602
1523#define LOGON_NO_ELEVATION 0x40000
1524#define LOGON_MANAGED_SERVICE 0x80000
1525#endif
1526
1527#define MSV1_0_SUBAUTHENTICATION_FLAGS 0xFF000000
1528
1529#define LOGON_GRACE_LOGON 0x01000000
1530
1531 typedef struct _MSV1_0_LM20_LOGON_PROFILE {
1532 MSV1_0_PROFILE_BUFFER_TYPE MessageType;
1533 LARGE_INTEGER KickOffTime;
1534 LARGE_INTEGER LogoffTime;
1535 ULONG UserFlags;
1536 UCHAR UserSessionKey[MSV1_0_USER_SESSION_KEY_LENGTH];
1537 UNICODE_STRING LogonDomainName;
1538 UCHAR LanmanSessionKey[MSV1_0_LANMAN_SESSION_KEY_LENGTH];
1539 UNICODE_STRING LogonServer;
1540 UNICODE_STRING UserParameters;
1541 } MSV1_0_LM20_LOGON_PROFILE,*PMSV1_0_LM20_LOGON_PROFILE;
1542
1543#define MSV1_0_OWF_PASSWORD_LENGTH 16
1544#define MSV1_0_SHA_PASSWORD_LENGTH 20
1545#define MSV1_0_CREDENTIAL_KEY_LENGTH 20
1546#define MSV1_0_CRED_LM_PRESENT 0x1
1547#define MSV1_0_CRED_NT_PRESENT 0x2
1548#define MSV1_0_CRED_REMOVED 0x4
1549#define MSV1_0_CRED_CREDKEY_PRESENT 0x8
1550#define MSV1_0_CRED_SHA_PRESENT 0x10
1551
1552#define MSV1_0_CRED_VERSION 0
1553#define MSV1_0_CRED_VERSION_V2 2
1554#define MSV1_0_CRED_VERSION_V3 4
1555#define MSV1_0_CRED_VERSION_IUM 0xffff0001
1556#define MSV1_0_CRED_VERSION_REMOTE 0xffff0002
1557#define MSV1_0_CRED_VERSION_ARSO 0xffff0003
1558#define MSV1_0_CRED_VERSION_RESERVED_1 0xfffffffe
1559#define MSV1_0_CRED_VERSION_INVALID 0xffffffff
1560
1561 typedef enum _MSV1_0_CREDENTIAL_KEY_TYPE {
1562 InvalidCredKey,
1563 DeprecatedIUMCredKey,
1564 DomainUserCredKey,
1565 LocalUserCredKey,
1566 ExternallySuppliedCredKey
1567 } MSV1_0_CREDENTIAL_KEY_TYPE;
1568
1569 typedef struct _MSV1_0_CREDENTIAL_KEY {
1570 UCHAR Data[MSV1_0_CREDENTIAL_KEY_LENGTH];
1571 } MSV1_0_CREDENTIAL_KEY, *PMSV1_0_CREDENTIAL_KEY;
1572
1573 typedef struct _MSV1_0_SUPPLEMENTAL_CREDENTIAL {
1574 ULONG Version;
1575 ULONG Flags;
1576 UCHAR LmPassword[MSV1_0_OWF_PASSWORD_LENGTH];
1577 UCHAR NtPassword[MSV1_0_OWF_PASSWORD_LENGTH];
1578 } MSV1_0_SUPPLEMENTAL_CREDENTIAL,*PMSV1_0_SUPPLEMENTAL_CREDENTIAL;
1579
1580 typedef struct _MSV1_0_SUPPLEMENTAL_CREDENTIAL_V2 {
1581 ULONG Version;
1582 ULONG Flags;
1583 UCHAR NtPassword[MSV1_0_OWF_PASSWORD_LENGTH];
1584 MSV1_0_CREDENTIAL_KEY CredentialKey;
1585 } MSV1_0_SUPPLEMENTAL_CREDENTIAL_V2, *PMSV1_0_SUPPLEMENTAL_CREDENTIAL_V2;
1586
1587 typedef struct _MSV1_0_SUPPLEMENTAL_CREDENTIAL_V3 {
1588 ULONG Version;
1589 ULONG Flags;
1590 MSV1_0_CREDENTIAL_KEY_TYPE CredentialKeyType;
1591 UCHAR NtPassword[MSV1_0_OWF_PASSWORD_LENGTH];
1592 MSV1_0_CREDENTIAL_KEY CredentialKey;
1593 UCHAR ShaPassword[MSV1_0_SHA_PASSWORD_LENGTH];
1594 } MSV1_0_SUPPLEMENTAL_CREDENTIAL_V3, *PMSV1_0_SUPPLEMENTAL_CREDENTIAL_V3;
1595
1596 typedef struct _MSV1_0_IUM_SUPPLEMENTAL_CREDENTIAL {
1597 ULONG Version;
1598 ULONG EncryptedCredsSize;
1599 UCHAR EncryptedCreds[1];
1600 } MSV1_0_IUM_SUPPLEMENTAL_CREDENTIAL, *PMSV1_0_IUM_SUPPLEMENTAL_CREDENTIAL;
1601
1602#define MSV1_0_IUM_SUPPLEMENTAL_CREDENTIAL_SIZE(Creds) \
1603 (FIELD_OFFSET(MSV1_0_IUM_SUPPLEMENTAL_CREDENTIAL, EncryptedCreds) + (Creds)->EncryptedCredsSize)
1604
1605 typedef struct _MSV1_0_REMOTE_SUPPLEMENTAL_CREDENTIAL {
1606 ULONG Version;
1607 ULONG Flags;
1608 MSV1_0_CREDENTIAL_KEY CredentialKey;
1609 MSV1_0_CREDENTIAL_KEY_TYPE CredentialKeyType;
1610 ULONG EncryptedCredsSize;
1611 UCHAR EncryptedCreds[1];
1612 } MSV1_0_REMOTE_SUPPLEMENTAL_CREDENTIAL, *PMSV1_0_REMOTE_SUPPLEMENTAL_CREDENTIAL;
1613
1614#define MSV1_0_NTLM3_RESPONSE_LENGTH 16
1615#define MSV1_0_NTLM3_OWF_LENGTH 16
1616
1617#define MSV1_0_MAX_NTLM3_LIFE 129600
1618#define MSV1_0_MAX_AVL_SIZE 64000
1619
1620#define MSV1_0_AV_FLAG_FORCE_GUEST 0x00000001
1621
1622#if _WIN32_WINNT >= 0x0600
1623#define MSV1_0_AV_FLAG_MIC_HANDSHAKE_MESSAGES 0x00000002
1624#endif
1625
1626#if _WIN32_WINNT >= 0x0601
1627#define MSV1_0_AV_FLAG_UNVERIFIED_TARGET 0x00000004
1628#endif
1629
1630 typedef struct _MSV1_0_NTLM3_RESPONSE {
1631 UCHAR Response[MSV1_0_NTLM3_RESPONSE_LENGTH];
1632 UCHAR RespType;
1633 UCHAR HiRespType;
1634 USHORT Flags;
1635 ULONG MsgWord;
1636 ULONGLONG TimeStamp;
1637 UCHAR ChallengeFromClient[MSV1_0_CHALLENGE_LENGTH];
1638 ULONG AvPairsOff;
1639 UCHAR Buffer[1];
1640 } MSV1_0_NTLM3_RESPONSE,*PMSV1_0_NTLM3_RESPONSE;
1641
1642#define MSV1_0_NTLM3_INPUT_LENGTH (sizeof(MSV1_0_NTLM3_RESPONSE) - MSV1_0_NTLM3_RESPONSE_LENGTH)
1643#define MSV1_0_NTLM3_MIN_NT_RESPONSE_LENGTH RTL_SIZEOF_THROUGH_FIELD(MSV1_0_NTLM3_RESPONSE,AvPairsOff)
1644
1645/* MsvAvSingleHost present in MS-NLMP specifications but not in WinSDK */
1646 typedef enum {
1647 MsvAvEOL,
1648 MsvAvNbComputerName,
1649 MsvAvNbDomainName,
1650 MsvAvDnsComputerName,
1651 MsvAvDnsDomainName
1652#if _WIN32_WINNT >= 0x0501
1653 ,MsvAvDnsTreeName
1654 ,MsvAvFlags
1655#if _WIN32_WINNT >= 0x0600
1656 ,MsvAvTimestamp
1657 ,MsvAvRestrictions
1658 ,MsvAvSingleHost = MsvAvRestrictions
1659 ,MsvAvTargetName
1660 ,MsvAvChannelBindings
1661#endif
1662#endif
1663 } MSV1_0_AVID;
1664
1665 typedef struct _MSV1_0_AV_PAIR {
1666 USHORT AvId;
1667 USHORT AvLen;
1668 } MSV1_0_AV_PAIR,*PMSV1_0_AV_PAIR;
1669
1670 typedef enum _MSV1_0_PROTOCOL_MESSAGE_TYPE {
1671 MsV1_0Lm20ChallengeRequest = 0,
1672 MsV1_0Lm20GetChallengeResponse,
1673 MsV1_0EnumerateUsers,
1674 MsV1_0GetUserInfo,
1675 MsV1_0ReLogonUsers,
1676 MsV1_0ChangePassword,
1677 MsV1_0ChangeCachedPassword,
1678 MsV1_0GenericPassthrough,
1679 MsV1_0CacheLogon,
1680 MsV1_0SubAuth,
1681 MsV1_0DeriveCredential,
1682 MsV1_0CacheLookup,
1683#if _WIN32_WINNT >= 0x0501
1684 MsV1_0SetProcessOption,
1685#endif
1686#if _WIN32_WINNT >= 0x0600
1687 MsV1_0ConfigLocalAliases,
1688 MsV1_0ClearCachedCredentials,
1689#endif
1690#if _WIN32_WINNT >= 0x0601
1691 MsV1_0LookupToken,
1692#endif
1693#if _WIN32_WINNT >= 0x0602
1694 MsV1_0ValidateAuth,
1695 MsV1_0CacheLookupEx,
1696 MsV1_0GetCredentialKey,
1697 MsV1_0SetThreadOption,
1698#endif
1699#if _WIN32_WINNT >= 0x0A00
1700 MsV1_0DecryptDpapiMasterKey,
1701 MsV1_0GetStrongCredentialKey,
1702 MsV1_0TransferCred,
1703 MsV1_0ProvisionTbal,
1704 MsV1_0DeleteTbalSecrets
1705#endif
1706 } MSV1_0_PROTOCOL_MESSAGE_TYPE,*PMSV1_0_PROTOCOL_MESSAGE_TYPE;
1707
1708 typedef struct _MSV1_0_CHANGEPASSWORD_REQUEST {
1709 MSV1_0_PROTOCOL_MESSAGE_TYPE MessageType;
1710 UNICODE_STRING DomainName;
1711 UNICODE_STRING AccountName;
1712 UNICODE_STRING OldPassword;
1713 UNICODE_STRING NewPassword;
1714 BOOLEAN Impersonating;
1715 } MSV1_0_CHANGEPASSWORD_REQUEST,*PMSV1_0_CHANGEPASSWORD_REQUEST;
1716
1717 typedef struct _MSV1_0_CHANGEPASSWORD_RESPONSE {
1718 MSV1_0_PROTOCOL_MESSAGE_TYPE MessageType;
1719 BOOLEAN PasswordInfoValid;
1720 DOMAIN_PASSWORD_INFORMATION DomainPasswordInfo;
1721 } MSV1_0_CHANGEPASSWORD_RESPONSE,*PMSV1_0_CHANGEPASSWORD_RESPONSE;
1722
1723 typedef struct _MSV1_0_PASSTHROUGH_REQUEST {
1724 MSV1_0_PROTOCOL_MESSAGE_TYPE MessageType;
1725 UNICODE_STRING DomainName;
1726 UNICODE_STRING PackageName;
1727 ULONG DataLength;
1728 PUCHAR LogonData;
1729 ULONG Pad;
1730 } MSV1_0_PASSTHROUGH_REQUEST,*PMSV1_0_PASSTHROUGH_REQUEST;
1731
1732 typedef struct _MSV1_0_PASSTHROUGH_RESPONSE {
1733 MSV1_0_PROTOCOL_MESSAGE_TYPE MessageType;
1734 ULONG Pad;
1735 ULONG DataLength;
1736 PUCHAR ValidationData;
1737 } MSV1_0_PASSTHROUGH_RESPONSE,*PMSV1_0_PASSTHROUGH_RESPONSE;
1738
1739 typedef struct _MSV1_0_SUBAUTH_REQUEST{
1740 MSV1_0_PROTOCOL_MESSAGE_TYPE MessageType;
1741 ULONG SubAuthPackageId;
1742 ULONG SubAuthInfoLength;
1743 PUCHAR SubAuthSubmitBuffer;
1744 } MSV1_0_SUBAUTH_REQUEST,*PMSV1_0_SUBAUTH_REQUEST;
1745
1746 typedef struct _MSV1_0_SUBAUTH_RESPONSE{
1747 MSV1_0_PROTOCOL_MESSAGE_TYPE MessageType;
1748 ULONG SubAuthInfoLength;
1749 PUCHAR SubAuthReturnBuffer;
1750 } MSV1_0_SUBAUTH_RESPONSE,*PMSV1_0_SUBAUTH_RESPONSE;
1751
1752#define RtlGenRandom SystemFunction036
1753#define RtlEncryptMemory SystemFunction040
1754#define RtlDecryptMemory SystemFunction041
1755
1756 BOOLEAN WINAPI RtlGenRandom(PVOID RandomBuffer,ULONG RandomBufferLength);
1757
1758#define RTL_ENCRYPT_MEMORY_SIZE 8
1759#define RTL_ENCRYPT_OPTION_CROSS_PROCESS 0x01
1760#define RTL_ENCRYPT_OPTION_SAME_LOGON 0x02
1761#define RTL_ENCRYPT_OPTION_FOR_SYSTEM 0x04
1762
1763 NTSTATUS WINAPI RtlEncryptMemory(PVOID Memory,ULONG MemorySize,ULONG OptionFlags);
1764 NTSTATUS WINAPI RtlDecryptMemory(PVOID Memory,ULONG MemorySize,ULONG OptionFlags);
1765
1766#define KERBEROS_VERSION 5
1767#define KERBEROS_REVISION 6
1768
1769#define KERB_ETYPE_NULL 0
1770#define KERB_ETYPE_DES_CBC_CRC 1
1771#define KERB_ETYPE_DES_CBC_MD4 2
1772#define KERB_ETYPE_DES_CBC_MD5 3
1773#define KERB_ETYPE_AES128_CTS_HMAC_SHA1_96 17
1774#define KERB_ETYPE_AES256_CTS_HMAC_SHA1_96 18
1775
1776#define KERB_ETYPE_RC4_MD4 -128
1777#define KERB_ETYPE_RC4_PLAIN2 -129
1778#define KERB_ETYPE_RC4_LM -130
1779#define KERB_ETYPE_RC4_SHA -131
1780#define KERB_ETYPE_DES_PLAIN -132
1781#define KERB_ETYPE_RC4_HMAC_OLD -133
1782#define KERB_ETYPE_RC4_PLAIN_OLD -134
1783#define KERB_ETYPE_RC4_HMAC_OLD_EXP -135
1784#define KERB_ETYPE_RC4_PLAIN_OLD_EXP -136
1785#define KERB_ETYPE_RC4_PLAIN -140
1786#define KERB_ETYPE_RC4_PLAIN_EXP -141
1787#define KERB_ETYPE_AES128_CTS_HMAC_SHA1_96_PLAIN -148
1788#define KERB_ETYPE_AES256_CTS_HMAC_SHA1_96_PLAIN -149
1789
1790#define KERB_ETYPE_DSA_SHA1_CMS 9
1791#define KERB_ETYPE_RSA_MD5_CMS 10
1792#define KERB_ETYPE_RSA_SHA1_CMS 11
1793#define KERB_ETYPE_RC2_CBC_ENV 12
1794#define KERB_ETYPE_RSA_ENV 13
1795#define KERB_ETYPE_RSA_ES_OEAP_ENV 14
1796#define KERB_ETYPE_DES_EDE3_CBC_ENV 15
1797
1798#define KERB_ETYPE_DSA_SIGN 8
1799#define KERB_ETYPE_RSA_PRIV 9
1800#define KERB_ETYPE_RSA_PUB 10
1801#define KERB_ETYPE_RSA_PUB_MD5 11
1802#define KERB_ETYPE_RSA_PUB_SHA1 12
1803#define KERB_ETYPE_PKCS7_PUB 13
1804
1805#define KERB_ETYPE_DES3_CBC_MD5 5
1806#define KERB_ETYPE_DES3_CBC_SHA1 7
1807#define KERB_ETYPE_DES3_CBC_SHA1_KD 16
1808
1809#define KERB_ETYPE_DES_CBC_MD5_NT 20
1810#define KERB_ETYPE_RC4_HMAC_NT 23
1811#define KERB_ETYPE_RC4_HMAC_NT_EXP 24
1812
1813#define KERB_CHECKSUM_NONE 0
1814#define KERB_CHECKSUM_CRC32 1
1815#define KERB_CHECKSUM_MD4 2
1816#define KERB_CHECKSUM_KRB_DES_MAC 4
1817#define KERB_CHECKSUM_KRB_DES_MAC_K 5
1818#define KERB_CHECKSUM_MD5 7
1819#define KERB_CHECKSUM_MD5_DES 8
1820#define KERB_CHECKSUM_SHA1_NEW 14
1821#define KERB_CHECKSUM_HMAC_SHA1_96_AES128 15
1822#define KERB_CHECKSUM_HMAC_SHA1_96_AES256 16
1823
1824#define KERB_CHECKSUM_LM -130
1825#define KERB_CHECKSUM_SHA1 -131
1826#define KERB_CHECKSUM_REAL_CRC32 -132
1827#define KERB_CHECKSUM_DES_MAC -133
1828#define KERB_CHECKSUM_DES_MAC_MD5 -134
1829#define KERB_CHECKSUM_MD25 -135
1830#define KERB_CHECKSUM_RC4_MD5 -136
1831#define KERB_CHECKSUM_MD5_HMAC -137
1832#define KERB_CHECKSUM_HMAC_MD5 -138
1833#define KERB_CHECKSUM_SHA256 -139
1834#define KERB_CHECKSUM_SHA384 -140
1835#define KERB_CHECKSUM_SHA512 -141
1836#define KERB_CHECKSUM_HMAC_SHA1_96_AES128_Ki -150
1837#define KERB_CHECKSUM_HMAC_SHA1_96_AES256_Ki -151
1838
1839#define AUTH_REQ_ALLOW_FORWARDABLE 0x00000001
1840#define AUTH_REQ_ALLOW_PROXIABLE 0x00000002
1841#define AUTH_REQ_ALLOW_POSTDATE 0x00000004
1842#define AUTH_REQ_ALLOW_RENEWABLE 0x00000008
1843#define AUTH_REQ_ALLOW_NOADDRESS 0x00000010
1844#define AUTH_REQ_ALLOW_ENC_TKT_IN_SKEY 0x00000020
1845#define AUTH_REQ_ALLOW_VALIDATE 0x00000040
1846#define AUTH_REQ_VALIDATE_CLIENT 0x00000080
1847#define AUTH_REQ_OK_AS_DELEGATE 0x00000100
1848#define AUTH_REQ_PREAUTH_REQUIRED 0x00000200
1849#define AUTH_REQ_TRANSITIVE_TRUST 0x00000400
1850#define AUTH_REQ_ALLOW_S4U_DELEGATE 0x00000800
1851
1852#define AUTH_REQ_PER_USER_FLAGS (AUTH_REQ_ALLOW_FORWARDABLE | AUTH_REQ_ALLOW_PROXIABLE | AUTH_REQ_ALLOW_POSTDATE | AUTH_REQ_ALLOW_RENEWABLE | AUTH_REQ_ALLOW_VALIDATE)
1853
1854#define KERB_TICKET_FLAGS_reserved 0x80000000
1855#define KERB_TICKET_FLAGS_forwardable 0x40000000
1856#define KERB_TICKET_FLAGS_forwarded 0x20000000
1857#define KERB_TICKET_FLAGS_proxiable 0x10000000
1858#define KERB_TICKET_FLAGS_proxy 0x08000000
1859#define KERB_TICKET_FLAGS_may_postdate 0x04000000
1860#define KERB_TICKET_FLAGS_postdated 0x02000000
1861#define KERB_TICKET_FLAGS_invalid 0x01000000
1862#define KERB_TICKET_FLAGS_renewable 0x00800000
1863#define KERB_TICKET_FLAGS_initial 0x00400000
1864#define KERB_TICKET_FLAGS_pre_authent 0x00200000
1865#define KERB_TICKET_FLAGS_hw_authent 0x00100000
1866#define KERB_TICKET_FLAGS_ok_as_delegate 0x00040000
1867#define KERB_TICKET_FLAGS_name_canonicalize 0x00010000
1868#if _WIN32_WINNT == 0x0501
1869#define KERB_TICKET_FLAGS_cname_in_pa_data 0x00040000
1870#endif
1871#define KERB_TICKET_FLAGS_enc_pa_rep 0x00010000
1872#define KERB_TICKET_FLAGS_reserved1 0x00000001
1873
1874#define KRB_NT_UNKNOWN 0
1875#define KRB_NT_PRINCIPAL 1
1876#define KRB_NT_PRINCIPAL_AND_ID -131
1877#define KRB_NT_SRV_INST 2
1878#define KRB_NT_SRV_INST_AND_ID -132
1879#define KRB_NT_SRV_HST 3
1880#define KRB_NT_SRV_XHST 4
1881#define KRB_NT_UID 5
1882#define KRB_NT_ENTERPRISE_PRINCIPAL 10
1883#define KRB_NT_WELLKNOWN 11
1884#define KRB_NT_MS_BRANCH_ID -133
1885#define KRB_NT_ENT_PRINCIPAL_AND_ID -130
1886#define KRB_NT_MS_PRINCIPAL -128
1887#define KRB_NT_MS_PRINCIPAL_AND_ID -129
1888
1889#define KERB_IS_MS_PRINCIPAL(_x_) (((_x_) <= KRB_NT_MS_PRINCIPAL) || ((_x_) >= KRB_NT_ENTERPRISE_PRINCIPAL))
1890
1891#if _WIN32_WINNT >= 0x0600
1892#define KRB_NT_X500_PRINCIPAL 6
1893#endif
1894
1895#define KRB_WELLKNOWN_STRING L"WELLKNOWN"
1896#define KRB_ANONYMOUS_STRING L"ANONYMOUS"
1897
1898#ifndef MICROSOFT_KERBEROS_NAME_A
1899
1900#define MICROSOFT_KERBEROS_NAME_A "Kerberos"
1901#define MICROSOFT_KERBEROS_NAME_W L"Kerberos"
1902#ifdef WIN32_CHICAGO
1903#define MICROSOFT_KERBEROS_NAME MICROSOFT_KERBEROS_NAME_A
1904#else
1905#define MICROSOFT_KERBEROS_NAME MICROSOFT_KERBEROS_NAME_W
1906#endif
1907#endif
1908
1909#define KERB_WRAP_NO_ENCRYPT 0x80000001
1910
1911 typedef enum _KERB_LOGON_SUBMIT_TYPE {
1912 KerbInteractiveLogon = 2,
1913 KerbSmartCardLogon = 6,
1914 KerbWorkstationUnlockLogon = 7,
1915 KerbSmartCardUnlockLogon = 8,
1916 KerbProxyLogon = 9,
1917 KerbTicketLogon = 10,
1918 KerbTicketUnlockLogon = 11,
1919 KerbS4ULogon = 12,
1920#if (_WIN32_WINNT >= 0x0600)
1921 KerbCertificateLogon = 13,
1922 KerbCertificateS4ULogon = 14,
1923 KerbCertificateUnlockLogon = 15,
1924#endif
1925#if (_WIN32_WINNT >= 0x0602)
1926 KerbNoElevationLogon = 83,
1927 KerbLuidLogon = 84
1928#endif
1929 } KERB_LOGON_SUBMIT_TYPE,*PKERB_LOGON_SUBMIT_TYPE;
1930
1931 typedef struct _KERB_INTERACTIVE_LOGON {
1932 KERB_LOGON_SUBMIT_TYPE MessageType;
1933 UNICODE_STRING LogonDomainName;
1934 UNICODE_STRING UserName;
1935 UNICODE_STRING Password;
1936 } KERB_INTERACTIVE_LOGON,*PKERB_INTERACTIVE_LOGON;
1937
1938 typedef struct _KERB_INTERACTIVE_UNLOCK_LOGON {
1939 KERB_INTERACTIVE_LOGON Logon;
1940 LUID LogonId;
1941 } KERB_INTERACTIVE_UNLOCK_LOGON,*PKERB_INTERACTIVE_UNLOCK_LOGON;
1942
1943 typedef struct _KERB_SMART_CARD_LOGON {
1944 KERB_LOGON_SUBMIT_TYPE MessageType;
1945 UNICODE_STRING Pin;
1946 ULONG CspDataLength;
1947 PUCHAR CspData;
1948 } KERB_SMART_CARD_LOGON,*PKERB_SMART_CARD_LOGON;
1949
1950 typedef struct _KERB_SMART_CARD_UNLOCK_LOGON {
1951 KERB_SMART_CARD_LOGON Logon;
1952 LUID LogonId;
1953 } KERB_SMART_CARD_UNLOCK_LOGON,*PKERB_SMART_CARD_UNLOCK_LOGON;
1954
1955 typedef struct _KERB_TICKET_LOGON {
1956 KERB_LOGON_SUBMIT_TYPE MessageType;
1957 ULONG Flags;
1958 ULONG ServiceTicketLength;
1959 ULONG TicketGrantingTicketLength;
1960 PUCHAR ServiceTicket;
1961 PUCHAR TicketGrantingTicket;
1962 } KERB_TICKET_LOGON,*PKERB_TICKET_LOGON;
1963
1964#define KERB_LOGON_FLAG_ALLOW_EXPIRED_TICKET 0x1
1965#define KERB_LOGON_FLAG_REDIRECTED 0x2
1966
1967 typedef struct _KERB_TICKET_UNLOCK_LOGON {
1968 KERB_TICKET_LOGON Logon;
1969 LUID LogonId;
1970 } KERB_TICKET_UNLOCK_LOGON,*PKERB_TICKET_UNLOCK_LOGON;
1971
1972#if _WIN32_WINNT >= 0x0600
1973#define KERB_S4U_LOGON_FLAG_CHECK_LOGONHOURS 0x2
1974#define KERB_S4U_LOGON_FLAG_IDENTIFY 0x8
1975#endif
1976
1977 typedef struct _KERB_S4U_LOGON {
1978 KERB_LOGON_SUBMIT_TYPE MessageType;
1979 ULONG Flags;
1980 UNICODE_STRING ClientUpn;
1981 UNICODE_STRING ClientRealm;
1982 } KERB_S4U_LOGON,*PKERB_S4U_LOGON;
1983
1984 typedef enum _KERB_PROFILE_BUFFER_TYPE {
1985 KerbInteractiveProfile = 2,KerbSmartCardProfile = 4,KerbTicketProfile = 6
1986 } KERB_PROFILE_BUFFER_TYPE,*PKERB_PROFILE_BUFFER_TYPE;
1987
1988 typedef struct _KERB_INTERACTIVE_PROFILE {
1989 KERB_PROFILE_BUFFER_TYPE MessageType;
1990 USHORT LogonCount;
1991 USHORT BadPasswordCount;
1992 LARGE_INTEGER LogonTime;
1993 LARGE_INTEGER LogoffTime;
1994 LARGE_INTEGER KickOffTime;
1995 LARGE_INTEGER PasswordLastSet;
1996 LARGE_INTEGER PasswordCanChange;
1997 LARGE_INTEGER PasswordMustChange;
1998 UNICODE_STRING LogonScript;
1999 UNICODE_STRING HomeDirectory;
2000 UNICODE_STRING FullName;
2001 UNICODE_STRING ProfilePath;
2002 UNICODE_STRING HomeDirectoryDrive;
2003 UNICODE_STRING LogonServer;
2004 ULONG UserFlags;
2005 } KERB_INTERACTIVE_PROFILE,*PKERB_INTERACTIVE_PROFILE;
2006
2007 typedef struct _KERB_SMART_CARD_PROFILE {
2008 KERB_INTERACTIVE_PROFILE Profile;
2009 ULONG CertificateSize;
2010 PUCHAR CertificateData;
2011 } KERB_SMART_CARD_PROFILE,*PKERB_SMART_CARD_PROFILE;
2012
2013 typedef struct KERB_CRYPTO_KEY {
2014 LONG KeyType;
2015 ULONG Length;
2016 PUCHAR Value;
2017 } KERB_CRYPTO_KEY,*PKERB_CRYPTO_KEY;
2018
2019 typedef struct KERB_CRYPTO_KEY32 {
2020 LONG KeyType;
2021 ULONG Length;
2022 ULONG Offset;
2023 } KERB_CRYPTO_KEY32,*PKERB_CRYPTO_KEY32;
2024
2025 typedef struct _KERB_TICKET_PROFILE {
2026 KERB_INTERACTIVE_PROFILE Profile;
2027 KERB_CRYPTO_KEY SessionKey;
2028 } KERB_TICKET_PROFILE,*PKERB_TICKET_PROFILE;
2029
2030 typedef enum _KERB_PROTOCOL_MESSAGE_TYPE {
2031 KerbDebugRequestMessage = 0,
2032 KerbQueryTicketCacheMessage,
2033 KerbChangeMachinePasswordMessage,
2034 KerbVerifyPacMessage,
2035 KerbRetrieveTicketMessage,
2036 KerbUpdateAddressesMessage,
2037 KerbPurgeTicketCacheMessage,
2038 KerbChangePasswordMessage,
2039 KerbRetrieveEncodedTicketMessage,
2040 KerbDecryptDataMessage,
2041 KerbAddBindingCacheEntryMessage,
2042 KerbSetPasswordMessage,
2043 KerbSetPasswordExMessage,
2044#if _WIN32_WINNT >= 0x0501
2045 KerbVerifyCredentialsMessage,
2046 KerbQueryTicketCacheExMessage,
2047 KerbPurgeTicketCacheExMessage,
2048#endif
2049#if _WIN32_WINNT >= 0x0502
2050 KerbRefreshSmartcardCredentialsMessage,
2051 KerbAddExtraCredentialsMessage,
2052 KerbQuerySupplementalCredentialsMessage,
2053#endif
2054#if _WIN32_WINNT >= 0x0600
2055 KerbTransferCredentialsMessage,
2056 KerbQueryTicketCacheEx2Message,
2057 KerbSubmitTicketMessage,
2058 KerbAddExtraCredentialsExMessage,
2059#endif
2060#if _WIN32_WINNT >= 0x0602
2061 KerbQueryKdcProxyCacheMessage,
2062 KerbPurgeKdcProxyCacheMessage,
2063 KerbQueryTicketCacheEx3Message,
2064 KerbCleanupMachinePkinitCredsMessage,
2065 KerbAddBindingCacheEntryExMessage,
2066 KerbQueryBindingCacheMessage,
2067 KerbPurgeBindingCacheMessage,
2068 KerbPinKdcMessage,
2069 KerbUnpinAllKdcsMessage,
2070 KerbQueryDomainExtendedPoliciesMessage,
2071 KerbQueryS4U2ProxyCacheMessage
2072#endif
2073#if _WIN32_WINNT >= 0x0A00
2074 ,KerbRetrieveKeyTabMessage
2075 ,KerbRefreshPolicyMessage
2076 ,KerbPrintCloudKerberosDebugMessage
2077#endif
2078 } KERB_PROTOCOL_MESSAGE_TYPE,*PKERB_PROTOCOL_MESSAGE_TYPE;
2079
2080 typedef struct _KERB_QUERY_TKT_CACHE_REQUEST {
2081 KERB_PROTOCOL_MESSAGE_TYPE MessageType;
2082 LUID LogonId;
2083 } KERB_QUERY_TKT_CACHE_REQUEST,*PKERB_QUERY_TKT_CACHE_REQUEST;
2084
2085 typedef struct _KERB_TICKET_CACHE_INFO {
2086 UNICODE_STRING ServerName;
2087 UNICODE_STRING RealmName;
2088 LARGE_INTEGER StartTime;
2089 LARGE_INTEGER EndTime;
2090 LARGE_INTEGER RenewTime;
2091 LONG EncryptionType;
2092 ULONG TicketFlags;
2093 } KERB_TICKET_CACHE_INFO,*PKERB_TICKET_CACHE_INFO;
2094
2095 typedef struct _KERB_TICKET_CACHE_INFO_EX {
2096 UNICODE_STRING ClientName;
2097 UNICODE_STRING ClientRealm;
2098 UNICODE_STRING ServerName;
2099 UNICODE_STRING ServerRealm;
2100 LARGE_INTEGER StartTime;
2101 LARGE_INTEGER EndTime;
2102 LARGE_INTEGER RenewTime;
2103 LONG EncryptionType;
2104 ULONG TicketFlags;
2105 } KERB_TICKET_CACHE_INFO_EX,*PKERB_TICKET_CACHE_INFO_EX;
2106
2107 typedef struct _KERB_TICKET_CACHE_INFO_EX2 {
2108 UNICODE_STRING ClientName;
2109 UNICODE_STRING ClientRealm;
2110 UNICODE_STRING ServerName;
2111 UNICODE_STRING ServerRealm;
2112 LARGE_INTEGER StartTime;
2113 LARGE_INTEGER EndTime;
2114 LARGE_INTEGER RenewTime;
2115 LONG EncryptionType;
2116 ULONG TicketFlags;
2117 ULONG SessionKeyType;
2118 } KERB_TICKET_CACHE_INFO_EX2,*PKERB_TICKET_CACHE_INFO_EX2;
2119
2120#if _WIN32_WINNT >= 0x0602
2121 typedef struct _KERB_TICKET_CACHE_INFO_EX3 {
2122 UNICODE_STRING ClientName;
2123 UNICODE_STRING ClientRealm;
2124 UNICODE_STRING ServerName;
2125 UNICODE_STRING ServerRealm;
2126 LARGE_INTEGER StartTime;
2127 LARGE_INTEGER EndTime;
2128 LARGE_INTEGER RenewTime;
2129 LONG EncryptionType;
2130 ULONG TicketFlags;
2131 ULONG SessionKeyType;
2132 ULONG BranchId;
2133 ULONG CacheFlags;
2134 UNICODE_STRING KdcCalled;
2135 } KERB_TICKET_CACHE_INFO_EX3, *PKERB_TICKET_CACHE_INFO_EX3;
2136#endif
2137
2138 typedef struct _KERB_QUERY_TKT_CACHE_RESPONSE {
2139 KERB_PROTOCOL_MESSAGE_TYPE MessageType;
2140 ULONG CountOfTickets;
2141 KERB_TICKET_CACHE_INFO Tickets[ANYSIZE_ARRAY];
2142 } KERB_QUERY_TKT_CACHE_RESPONSE,*PKERB_QUERY_TKT_CACHE_RESPONSE;
2143
2144 typedef struct _KERB_QUERY_TKT_CACHE_EX_RESPONSE {
2145 KERB_PROTOCOL_MESSAGE_TYPE MessageType;
2146 ULONG CountOfTickets;
2147 KERB_TICKET_CACHE_INFO_EX Tickets[ANYSIZE_ARRAY];
2148 } KERB_QUERY_TKT_CACHE_EX_RESPONSE,*PKERB_QUERY_TKT_CACHE_EX_RESPONSE;
2149
2150 typedef struct _KERB_QUERY_TKT_CACHE_EX2_RESPONSE {
2151 KERB_PROTOCOL_MESSAGE_TYPE MessageType;
2152 ULONG CountOfTickets;
2153 KERB_TICKET_CACHE_INFO_EX2 Tickets[ANYSIZE_ARRAY];
2154 } KERB_QUERY_TKT_CACHE_EX2_RESPONSE,*PKERB_QUERY_TKT_CACHE_EX2_RESPONSE;
2155
2156#if _WIN32_WINNT >= 0x0602
2157 typedef struct _KERB_QUERY_TKT_CACHE_EX3_RESPONSE {
2158 KERB_PROTOCOL_MESSAGE_TYPE MessageType;
2159 ULONG CountOfTickets;
2160 KERB_TICKET_CACHE_INFO_EX3 Tickets[ANYSIZE_ARRAY];
2161 } KERB_QUERY_TKT_CACHE_EX3_RESPONSE, *PKERB_QUERY_TKT_CACHE_EX3_RESPONSE;
2162#endif
2163
2164#ifndef __SECHANDLE_DEFINED__
2165 typedef struct _SecHandle {
2166 ULONG_PTR dwLower;
2167 ULONG_PTR dwUpper;
2168 } SecHandle,*PSecHandle;
2169
2170#define __SECHANDLE_DEFINED__
2171#endif
2172
2173#define KERB_USE_DEFAULT_TICKET_FLAGS 0x0
2174
2175#define KERB_RETRIEVE_TICKET_DEFAULT 0x0
2176#define KERB_RETRIEVE_TICKET_DONT_USE_CACHE 0x1
2177#define KERB_RETRIEVE_TICKET_USE_CACHE_ONLY 0x2
2178#define KERB_RETRIEVE_TICKET_USE_CREDHANDLE 0x4
2179#define KERB_RETRIEVE_TICKET_AS_KERB_CRED 0x8
2180#define KERB_RETRIEVE_TICKET_WITH_SEC_CRED 0x10
2181
2182#if _WIN32_WINNT >= 0x0600
2183#define KERB_RETRIEVE_TICKET_CACHE_TICKET 0x20
2184#endif
2185
2186#if _WIN32_WINNT >= 0x0601
2187#define KERB_RETRIEVE_TICKET_MAX_LIFETIME 0x40
2188#endif
2189
2190#define KERB_ETYPE_DEFAULT 0x0
2191
2192 typedef struct _KERB_AUTH_DATA {
2193 ULONG Type;
2194 ULONG Length;
2195 PUCHAR Data;
2196 } KERB_AUTH_DATA,*PKERB_AUTH_DATA;
2197
2198 typedef struct _KERB_NET_ADDRESS {
2199 ULONG Family;
2200 ULONG Length;
2201 PCHAR Address;
2202 } KERB_NET_ADDRESS,*PKERB_NET_ADDRESS;
2203
2204 typedef struct _KERB_NET_ADDRESSES {
2205 ULONG Number;
2206 KERB_NET_ADDRESS Addresses[ANYSIZE_ARRAY];
2207 } KERB_NET_ADDRESSES,*PKERB_NET_ADDRESSES;
2208
2209 typedef struct _KERB_EXTERNAL_NAME {
2210 SHORT NameType;
2211 USHORT NameCount;
2212 UNICODE_STRING Names[ANYSIZE_ARRAY];
2213 } KERB_EXTERNAL_NAME,*PKERB_EXTERNAL_NAME;
2214
2215 typedef struct _KERB_EXTERNAL_TICKET {
2216 PKERB_EXTERNAL_NAME ServiceName;
2217 PKERB_EXTERNAL_NAME TargetName;
2218 PKERB_EXTERNAL_NAME ClientName;
2219 UNICODE_STRING DomainName;
2220 UNICODE_STRING TargetDomainName;
2221 UNICODE_STRING AltTargetDomainName;
2222 KERB_CRYPTO_KEY SessionKey;
2223 ULONG TicketFlags;
2224 ULONG Flags;
2225 LARGE_INTEGER KeyExpirationTime;
2226 LARGE_INTEGER StartTime;
2227 LARGE_INTEGER EndTime;
2228 LARGE_INTEGER RenewUntil;
2229 LARGE_INTEGER TimeSkew;
2230 ULONG EncodedTicketSize;
2231 PUCHAR EncodedTicket;
2232 } KERB_EXTERNAL_TICKET,*PKERB_EXTERNAL_TICKET;
2233
2234 typedef struct _KERB_RETRIEVE_TKT_REQUEST {
2235 KERB_PROTOCOL_MESSAGE_TYPE MessageType;
2236 LUID LogonId;
2237 UNICODE_STRING TargetName;
2238 ULONG TicketFlags;
2239 ULONG CacheOptions;
2240 LONG EncryptionType;
2241 SecHandle CredentialsHandle;
2242 } KERB_RETRIEVE_TKT_REQUEST,*PKERB_RETRIEVE_TKT_REQUEST;
2243
2244 typedef struct _KERB_RETRIEVE_TKT_RESPONSE {
2245 KERB_EXTERNAL_TICKET Ticket;
2246 } KERB_RETRIEVE_TKT_RESPONSE,*PKERB_RETRIEVE_TKT_RESPONSE;
2247
2248 typedef struct _KERB_PURGE_TKT_CACHE_REQUEST {
2249 KERB_PROTOCOL_MESSAGE_TYPE MessageType;
2250 LUID LogonId;
2251 UNICODE_STRING ServerName;
2252 UNICODE_STRING RealmName;
2253 } KERB_PURGE_TKT_CACHE_REQUEST,*PKERB_PURGE_TKT_CACHE_REQUEST;
2254
2255#define KERB_PURGE_ALL_TICKETS 1
2256
2257 typedef struct _KERB_PURGE_TKT_CACHE_EX_REQUEST {
2258 KERB_PROTOCOL_MESSAGE_TYPE MessageType;
2259 LUID LogonId;
2260 ULONG Flags;
2261 KERB_TICKET_CACHE_INFO_EX TicketTemplate;
2262 } KERB_PURGE_TKT_CACHE_EX_REQUEST,*PKERB_PURGE_TKT_CACHE_EX_REQUEST;
2263
2264 typedef struct _KERB_SUBMIT_TKT_REQUEST {
2265 KERB_PROTOCOL_MESSAGE_TYPE MessageType;
2266 LUID LogonId;
2267 ULONG Flags;
2268 KERB_CRYPTO_KEY32 Key;
2269 ULONG KerbCredSize;
2270 ULONG KerbCredOffset;
2271 } KERB_SUBMIT_TKT_REQUEST, *PKERB_SUBMIT_TKT_REQUEST;
2272
2273#if _WIN32_WINNT >= 0x0602
2274
2275 typedef struct _KERB_QUERY_KDC_PROXY_CACHE_REQUEST {
2276 KERB_PROTOCOL_MESSAGE_TYPE MessageType;
2277 ULONG Flags;
2278 LUID LogonId;
2279 } KERB_QUERY_KDC_PROXY_CACHE_REQUEST, *PKERB_QUERY_KDC_PROXY_CACHE_REQUEST;
2280
2281 typedef struct _KDC_PROXY_CACHE_ENTRY_DATA {
2282 ULONG64 SinceLastUsed;
2283 UNICODE_STRING DomainName;
2284 UNICODE_STRING ProxyServerName;
2285 UNICODE_STRING ProxyServerVdir;
2286 USHORT ProxyServerPort;
2287 LUID LogonId;
2288 UNICODE_STRING CredUserName;
2289 UNICODE_STRING CredDomainName;
2290 BOOLEAN GlobalCache;
2291 } KDC_PROXY_CACHE_ENTRY_DATA, *PKDC_PROXY_CACHE_ENTRY_DATA;
2292
2293 typedef struct _KERB_QUERY_KDC_PROXY_CACHE_RESPONSE {
2294 KERB_PROTOCOL_MESSAGE_TYPE MessageType;
2295 ULONG CountOfEntries;
2296 PKDC_PROXY_CACHE_ENTRY_DATA Entries;
2297 } KERB_QUERY_KDC_PROXY_CACHE_RESPONSE, *PKERB_QUERY_KDC_PROXY_CACHE_RESPONSE;
2298
2299 typedef struct _KERB_PURGE_KDC_PROXY_CACHE_REQUEST {
2300 KERB_PROTOCOL_MESSAGE_TYPE MessageType;
2301 ULONG Flags;
2302 LUID LogonId;
2303 } KERB_PURGE_KDC_PROXY_CACHE_REQUEST, *PKERB_PURGE_KDC_PROXY_CACHE_REQUEST;
2304
2305 typedef struct _KERB_PURGE_KDC_PROXY_CACHE_RESPONSE {
2306 KERB_PROTOCOL_MESSAGE_TYPE MessageType;
2307 ULONG CountOfPurged;
2308 } KERB_PURGE_KDC_PROXY_CACHE_RESPONSE, *PKERB_PURGE_KDC_PROXY_CACHE_RESPONSE;
2309
2310#define KERB_S4U2PROXY_CACHE_ENTRY_INFO_FLAG_NEGATIVE 0x1
2311
2312 typedef struct _KERB_S4U2PROXY_CACHE_ENTRY_INFO {
2313 UNICODE_STRING ServerName;
2314 ULONG Flags;
2315 NTSTATUS LastStatus;
2316 LARGE_INTEGER Expiry;
2317 } KERB_S4U2PROXY_CACHE_ENTRY_INFO, *PKERB_S4U2PROXY_CACHE_ENTRY_INFO;
2318
2319#define KERB_S4U2PROXY_CRED_FLAG_NEGATIVE 0x1
2320
2321 typedef struct _KERB_S4U2PROXY_CRED {
2322 UNICODE_STRING UserName;
2323 UNICODE_STRING DomainName;
2324 ULONG Flags;
2325 NTSTATUS LastStatus;
2326 LARGE_INTEGER Expiry;
2327 ULONG CountOfEntries;
2328 PKERB_S4U2PROXY_CACHE_ENTRY_INFO Entries;
2329 } KERB_S4U2PROXY_CRED, *PKERB_S4U2PROXY_CRED;
2330
2331 typedef struct _KERB_QUERY_S4U2PROXY_CACHE_REQUEST {
2332 KERB_PROTOCOL_MESSAGE_TYPE MessageType;
2333 ULONG Flags;
2334 LUID LogonId;
2335 } KERB_QUERY_S4U2PROXY_CACHE_REQUEST, *PKERB_QUERY_S4U2PROXY_CACHE_REQUEST;
2336
2337 typedef struct _KERB_QUERY_S4U2PROXY_CACHE_RESPONSE {
2338 KERB_PROTOCOL_MESSAGE_TYPE MessageType;
2339 ULONG CountOfCreds;
2340 PKERB_S4U2PROXY_CRED Creds;
2341 } KERB_QUERY_S4U2PROXY_CACHE_RESPONSE, *PKERB_QUERY_S4U2PROXY_CACHE_RESPONSE;
2342
2343#endif
2344
2345#if _WIN32_WINNT >= 0x0A00
2346
2347 typedef struct _KERB_RETRIEVE_KEY_TAB_REQUEST {
2348 KERB_PROTOCOL_MESSAGE_TYPE MessageType;
2349 ULONG Flags;
2350 UNICODE_STRING UserName;
2351 UNICODE_STRING DomainName;
2352 UNICODE_STRING Password;
2353 } KERB_RETRIEVE_KEY_TAB_REQUEST, *PKERB_RETRIEVE_KEY_TAB_REQUEST;
2354
2355 typedef struct _KERB_RETRIEVE_KEY_TAB_RESPONSE {
2356 KERB_PROTOCOL_MESSAGE_TYPE MessageType;
2357 ULONG KeyTabLength;
2358 PUCHAR KeyTab;
2359 } KERB_RETRIEVE_KEY_TAB_RESPONSE, *PKERB_RETRIEVE_KEY_TAB_RESPONSE;
2360
2361#define KERB_REFRESH_POLICY_KERBEROS 0x1
2362#define KERB_REFRESH_POLICY_KDC 0x2
2363
2364 typedef struct _KERB_REFRESH_POLICY_REQUEST {
2365 KERB_PROTOCOL_MESSAGE_TYPE MessageType;
2366 ULONG Flags;
2367 } KERB_REFRESH_POLICY_REQUEST, *PKERB_REFRESH_POLICY_REQUEST;
2368
2369 typedef struct _KERB_REFRESH_POLICY_RESPONSE {
2370 KERB_PROTOCOL_MESSAGE_TYPE MessageType;
2371 ULONG Flags;
2372 } KERB_REFRESH_POLICY_RESPONSE, *PKERB_REFRESH_POLICY_RESPONSE;
2373
2374 typedef struct _KERB_CLOUD_KERBEROS_DEBUG_REQUEST {
2375 KERB_PROTOCOL_MESSAGE_TYPE MessageType;
2376 LUID LogonId;
2377 } KERB_CLOUD_KERBEROS_DEBUG_REQUEST, *PKERB_CLOUD_KERBEROS_DEBUG_REQUEST;
2378
2379 typedef struct _KERB_CLOUD_KERBEROS_DEBUG_RESPONSE {
2380 KERB_PROTOCOL_MESSAGE_TYPE MessageType;
2381 ULONG Version;
2382 ULONG Length;
2383 ULONG Data[ANYSIZE_ARRAY];
2384 } KERB_CLOUD_KERBEROS_DEBUG_RESPONSE, *PKERB_CLOUD_KERBEROS_DEBUG_RESPONSE;
2385
2386#define KERB_CLOUD_KERBEROS_DEBUG_DATA_VERSION 1
2387
2388 typedef struct _KERB_CLOUD_KERBEROS_DEBUG_DATA_V0 {
2389 unsigned int EnabledByPolicy : 1;
2390 unsigned int AsRepCallbackPresent : 1;
2391 unsigned int AsRepCallbackUsed : 1;
2392 unsigned int CloudReferralTgtAvailable : 1;
2393 unsigned int SpnOracleConfigured : 1;
2394 unsigned int KdcProxyPresent : 1;
2395 } KERB_CLOUD_KERBEROS_DEBUG_DATA_V0, *PKERB_CLOUD_KERBEROS_DEBUG_DATA_V0;
2396
2397 typedef struct _KERB_CLOUD_KERBEROS_DEBUG_DATA {
2398 unsigned int EnabledByPolicy : 1;
2399 unsigned int AsRepCallbackPresent : 1;
2400 unsigned int AsRepCallbackUsed : 1;
2401 unsigned int CloudReferralTgtAvailable : 1;
2402 unsigned int SpnOracleConfigured : 1;
2403 unsigned int KdcProxyPresent : 1;
2404 unsigned int PublicKeyCredsPresent : 1;
2405 unsigned int PasswordKeysPresent : 1;
2406 unsigned int PasswordPresent : 1;
2407 unsigned int AsRepSourceCred : 8;
2408 } KERB_CLOUD_KERBEROS_DEBUG_DATA, *PKERB_CLOUD_KERBEROS_DEBUG_DATA;
2409
2410#endif /* _WIN32_WINNT >= 0x0A00 */
2411
2412 typedef struct _KERB_CHANGEPASSWORD_REQUEST {
2413 KERB_PROTOCOL_MESSAGE_TYPE MessageType;
2414 UNICODE_STRING DomainName;
2415 UNICODE_STRING AccountName;
2416 UNICODE_STRING OldPassword;
2417 UNICODE_STRING NewPassword;
2418 BOOLEAN Impersonating;
2419 } KERB_CHANGEPASSWORD_REQUEST,*PKERB_CHANGEPASSWORD_REQUEST;
2420
2421 typedef struct _KERB_SETPASSWORD_REQUEST {
2422 KERB_PROTOCOL_MESSAGE_TYPE MessageType;
2423 LUID LogonId;
2424 SecHandle CredentialsHandle;
2425 ULONG Flags;
2426 UNICODE_STRING DomainName;
2427 UNICODE_STRING AccountName;
2428 UNICODE_STRING Password;
2429 } KERB_SETPASSWORD_REQUEST,*PKERB_SETPASSWORD_REQUEST;
2430
2431 typedef struct _KERB_SETPASSWORD_EX_REQUEST {
2432 KERB_PROTOCOL_MESSAGE_TYPE MessageType;
2433 LUID LogonId;
2434 SecHandle CredentialsHandle;
2435 ULONG Flags;
2436 UNICODE_STRING AccountRealm;
2437 UNICODE_STRING AccountName;
2438 UNICODE_STRING Password;
2439 UNICODE_STRING ClientRealm;
2440 UNICODE_STRING ClientName;
2441 BOOLEAN Impersonating;
2442 UNICODE_STRING KdcAddress;
2443 ULONG KdcAddressType;
2444 } KERB_SETPASSWORD_EX_REQUEST,*PKERB_SETPASSWORD_EX_REQUEST;
2445
2446#define DS_UNKNOWN_ADDRESS_TYPE 0
2447#define KERB_SETPASS_USE_LOGONID 1
2448#define KERB_SETPASS_USE_CREDHANDLE 2
2449
2450 typedef struct _KERB_DECRYPT_REQUEST {
2451 KERB_PROTOCOL_MESSAGE_TYPE MessageType;
2452 LUID LogonId;
2453 ULONG Flags;
2454 LONG CryptoType;
2455 LONG KeyUsage;
2456 KERB_CRYPTO_KEY Key;
2457 ULONG EncryptedDataSize;
2458 ULONG InitialVectorSize;
2459 PUCHAR InitialVector;
2460 PUCHAR EncryptedData;
2461 } KERB_DECRYPT_REQUEST,*PKERB_DECRYPT_REQUEST;
2462
2463#define KERB_DECRYPT_FLAG_DEFAULT_KEY 0x00000001
2464
2465 typedef struct _KERB_DECRYPT_RESPONSE {
2466 UCHAR DecryptedData[ANYSIZE_ARRAY];
2467 } KERB_DECRYPT_RESPONSE,*PKERB_DECRYPT_RESPONSE;
2468
2469 typedef struct _KERB_ADD_BINDING_CACHE_ENTRY_REQUEST {
2470 KERB_PROTOCOL_MESSAGE_TYPE MessageType;
2471 UNICODE_STRING RealmName;
2472 UNICODE_STRING KdcAddress;
2473 ULONG AddressType;
2474 } KERB_ADD_BINDING_CACHE_ENTRY_REQUEST,*PKERB_ADD_BINDING_CACHE_ENTRY_REQUEST;
2475
2476 typedef struct _KERB_REFRESH_SCCRED_REQUEST {
2477 KERB_PROTOCOL_MESSAGE_TYPE MessageType;
2478 UNICODE_STRING CredentialBlob;
2479 LUID LogonId;
2480 ULONG Flags;
2481 } KERB_REFRESH_SCCRED_REQUEST,*PKERB_REFRESH_SCCRED_REQUEST;
2482
2483#define KERB_REFRESH_SCCRED_RELEASE 0x0
2484#define KERB_REFRESH_SCCRED_GETTGT 0x1
2485
2486 typedef struct _KERB_ADD_CREDENTIALS_REQUEST {
2487 KERB_PROTOCOL_MESSAGE_TYPE MessageType;
2488 UNICODE_STRING UserName;
2489 UNICODE_STRING DomainName;
2490 UNICODE_STRING Password;
2491 LUID LogonId;
2492 ULONG Flags;
2493 } KERB_ADD_CREDENTIALS_REQUEST,*PKERB_ADD_CREDENTIALS_REQUEST;
2494
2495#define KERB_REQUEST_ADD_CREDENTIAL 1
2496#define KERB_REQUEST_REPLACE_CREDENTIAL 2
2497#define KERB_REQUEST_REMOVE_CREDENTIAL 4
2498
2499#if _WIN32_WINNT >= 0x0600
2500
2501 typedef struct _KERB_ADD_CREDENTIALS_REQUEST_EX {
2502 KERB_ADD_CREDENTIALS_REQUEST Credentials;
2503 ULONG PrincipalNameCount;
2504 UNICODE_STRING PrincipalNames[1];
2505 } KERB_ADD_CREDENTIALS_REQUEST_EX, *PKERB_ADD_CREDENTIALS_REQUEST_EX;
2506
2507#endif
2508
2509 typedef struct _KERB_TRANSFER_CRED_REQUEST {
2510 KERB_PROTOCOL_MESSAGE_TYPE MessageType;
2511 LUID OriginLogonId;
2512 LUID DestinationLogonId;
2513 ULONG Flags;
2514 } KERB_TRANSFER_CRED_REQUEST,*PKERB_TRANSFER_CRED_REQUEST;
2515
2516#define KERB_TRANSFER_CRED_WITH_TICKETS 1
2517#define KERB_TRANSFER_CRED_CLEANUP_CREDENTIALS 2
2518
2519#if _WIN32_WINNT >= 0x0602
2520
2521 typedef struct _KERB_CLEANUP_MACHINE_PKINIT_CREDS_REQUEST {
2522 KERB_PROTOCOL_MESSAGE_TYPE MessageType;
2523 LUID LogonId;
2524 } KERB_CLEANUP_MACHINE_PKINIT_CREDS_REQUEST, *PKERB_CLEANUP_MACHINE_PKINIT_CREDS_REQUEST;
2525
2526 typedef struct _KERB_BINDING_CACHE_ENTRY_DATA {
2527 ULONG64 DiscoveryTime;
2528 UNICODE_STRING RealmName;
2529 UNICODE_STRING KdcAddress;
2530 ULONG AddressType;
2531 ULONG Flags;
2532 ULONG DcFlags;
2533 ULONG CacheFlags;
2534 UNICODE_STRING KdcName;
2535 } KERB_BINDING_CACHE_ENTRY_DATA, *PKERB_BINDING_CACHE_ENTRY_DATA;
2536
2537 typedef struct _KERB_QUERY_BINDING_CACHE_RESPONSE {
2538 KERB_PROTOCOL_MESSAGE_TYPE MessageType;
2539 ULONG CountOfEntries;
2540 PKERB_BINDING_CACHE_ENTRY_DATA Entries;
2541 } KERB_QUERY_BINDING_CACHE_RESPONSE, *PKERB_QUERY_BINDING_CACHE_RESPONSE;
2542
2543 typedef struct _KERB_ADD_BINDING_CACHE_ENTRY_EX_REQUEST {
2544 KERB_PROTOCOL_MESSAGE_TYPE MessageType;
2545 UNICODE_STRING RealmName;
2546 UNICODE_STRING KdcAddress;
2547 ULONG AddressType;
2548 ULONG DcFlags;
2549 } KERB_ADD_BINDING_CACHE_ENTRY_EX_REQUEST, *PKERB_ADD_BINDING_CACHE_ENTRY_EX_REQUEST;
2550
2551 typedef struct _KERB_QUERY_BINDING_CACHE_REQUEST {
2552 KERB_PROTOCOL_MESSAGE_TYPE MessageType;
2553 } KERB_QUERY_BINDING_CACHE_REQUEST, *PKERB_QUERY_BINDING_CACHE_REQUEST;
2554
2555 typedef struct _KERB_PURGE_BINDING_CACHE_REQUEST {
2556 KERB_PROTOCOL_MESSAGE_TYPE MessageType;
2557 } KERB_PURGE_BINDING_CACHE_REQUEST, *PKERB_PURGE_BINDING_CACHE_REQUEST;
2558
2559 typedef struct _KERB_QUERY_DOMAIN_EXTENDED_POLICIES_REQUEST {
2560 KERB_PROTOCOL_MESSAGE_TYPE MessageType;
2561 ULONG Flags;
2562 UNICODE_STRING DomainName;
2563 } KERB_QUERY_DOMAIN_EXTENDED_POLICIES_REQUEST, *PKERB_QUERY_DOMAIN_EXTENDED_POLICIES_REQUEST;
2564
2565#define KERB_QUERY_DOMAIN_EXTENDED_POLICIES_RESPONSE_FLAG_DAC_DISABLED 1
2566
2567 typedef struct _KERB_QUERY_DOMAIN_EXTENDED_POLICIES_RESPONSE {
2568 KERB_PROTOCOL_MESSAGE_TYPE MessageType;
2569 ULONG Flags;
2570 ULONG ExtendedPolicies;
2571 ULONG DsFlags;
2572 } KERB_QUERY_DOMAIN_EXTENDED_POLICIES_RESPONSE, *PKERB_QUERY_DOMAIN_EXTENDED_POLICIES_RESPONSE;
2573
2574 typedef enum _KERB_CERTIFICATE_INFO_TYPE {
2575 CertHashInfo = 1
2576 } KERB_CERTIFICATE_INFO_TYPE, *PKERB_CERTIFICATE_INFO_TYPE;
2577
2578 typedef struct _KERB_CERTIFICATE_HASHINFO {
2579 USHORT StoreNameLength;
2580 USHORT HashLength;
2581 } KERB_CERTIFICATE_HASHINFO, *PKERB_CERTIFICATE_HASHINFO;
2582
2583 typedef struct _KERB_CERTIFICATE_INFO {
2584 ULONG CertInfoSize;
2585 ULONG InfoType;
2586 } KERB_CERTIFICATE_INFO, *PKERB_CERTIFICATE_INFO;
2587
2588#endif
2589
2590#define PER_USER_POLICY_UNCHANGED 0x00
2591#define PER_USER_AUDIT_SUCCESS_INCLUDE 0x01
2592#define PER_USER_AUDIT_SUCCESS_EXCLUDE 0x02
2593#define PER_USER_AUDIT_FAILURE_INCLUDE 0x04
2594#define PER_USER_AUDIT_FAILURE_EXCLUDE 0x08
2595#define PER_USER_AUDIT_NONE 0x10
2596
2597#define VALID_PER_USER_AUDIT_POLICY_FLAG (PER_USER_AUDIT_SUCCESS_INCLUDE | PER_USER_AUDIT_SUCCESS_EXCLUDE | PER_USER_AUDIT_FAILURE_INCLUDE | PER_USER_AUDIT_FAILURE_EXCLUDE | PER_USER_AUDIT_NONE)
2598
2599 typedef struct _AUDIT_POLICY_INFORMATION {
2600 GUID AuditSubCategoryGuid;
2601 ULONG AuditingInformation;
2602 GUID AuditCategoryGuid;
2603 } AUDIT_POLICY_INFORMATION, *PAUDIT_POLICY_INFORMATION;
2604 typedef const PAUDIT_POLICY_INFORMATION PCAUDIT_POLICY_INFORMATION, LPCAUDIT_POLICY_INFORMATION;
2605
2606#define AUDIT_SET_SYSTEM_POLICY 0x0001
2607#define AUDIT_QUERY_SYSTEM_POLICY 0x0002
2608#define AUDIT_SET_USER_POLICY 0x0004
2609#define AUDIT_QUERY_USER_POLICY 0x0008
2610#define AUDIT_ENUMERATE_USERS 0x0010
2611#define AUDIT_SET_MISC_POLICY 0x0020
2612#define AUDIT_QUERY_MISC_POLICY 0x0040
2613
2614#define AUDIT_GENERIC_ALL (STANDARD_RIGHTS_REQUIRED | AUDIT_SET_SYSTEM_POLICY | AUDIT_QUERY_SYSTEM_POLICY | \
2615 AUDIT_SET_USER_POLICY | AUDIT_QUERY_USER_POLICY | AUDIT_ENUMERATE_USERS | \
2616 AUDIT_SET_MISC_POLICY | AUDIT_QUERY_MISC_POLICY)
2617
2618#define AUDIT_GENERIC_READ (STANDARD_RIGHTS_READ | AUDIT_QUERY_SYSTEM_POLICY | AUDIT_QUERY_USER_POLICY | \
2619 AUDIT_ENUMERATE_USERS | AUDIT_QUERY_MISC_POLICY)
2620
2621#define AUDIT_GENERIC_WRITE (STANDARD_RIGHTS_WRITE | AUDIT_SET_USER_POLICY | AUDIT_SET_MISC_POLICY | \
2622 AUDIT_SET_SYSTEM_POLICY)
2623
2624#define AUDIT_GENERIC_EXECUTE STANDARD_RIGHTS_EXECUTE
2625
2626 typedef struct _POLICY_AUDIT_SID_ARRAY {
2627 ULONG UsersCount;
2628 PSID *UserSidArray;
2629 } POLICY_AUDIT_SID_ARRAY, *PPOLICY_AUDIT_SID_ARRAY;
2630
2631#if _WIN32_WINNT >= 0x0600
2632
2633#define KERB_CERTIFICATE_LOGON_FLAG_CHECK_DUPLICATES 0x1
2634#define KERB_CERTIFICATE_LOGON_FLAG_USE_CERTIFICATE_INFO 0x2
2635
2636 typedef struct _KERB_CERTIFICATE_LOGON {
2637 KERB_LOGON_SUBMIT_TYPE MessageType;
2638 UNICODE_STRING DomainName;
2639 UNICODE_STRING UserName;
2640 UNICODE_STRING Pin;
2641 ULONG Flags;
2642 ULONG CspDataLength;
2643 PUCHAR CspData;
2644 } KERB_CERTIFICATE_LOGON, *PKERB_CERTIFICATE_LOGON;
2645
2646 typedef struct _KERB_CERTIFICATE_UNLOCK_LOGON {
2647 KERB_CERTIFICATE_LOGON Logon;
2648 LUID LogonId;
2649 } KERB_CERTIFICATE_UNLOCK_LOGON, *PKERB_CERTIFICATE_UNLOCK_LOGON;
2650
2651#define KERB_CERTIFICATE_S4U_LOGON_FLAG_CHECK_DUPLICATES 0x1
2652#define KERB_CERTIFICATE_S4U_LOGON_FLAG_CHECK_LOGONHOURS 0x2
2653#define KERB_CERTIFICATE_S4U_LOGON_FLAG_FAIL_IF_NT_AUTH_POLICY_REQUIRED 0x4
2654#define KERB_CERTIFICATE_S4U_LOGON_FLAG_IDENTIFY 0x8
2655
2656 typedef struct _KERB_CERTIFICATE_S4U_LOGON {
2657 KERB_LOGON_SUBMIT_TYPE MessageType;
2658 ULONG Flags;
2659 UNICODE_STRING UserPrincipalName;
2660 UNICODE_STRING DomainName;
2661 ULONG CertificateLength;
2662 PUCHAR Certificate;
2663 } KERB_CERTIFICATE_S4U_LOGON, *PKERB_CERTIFICATE_S4U_LOGON;
2664
2665 typedef struct _KERB_SMARTCARD_CSP_INFO {
2666 DWORD dwCspInfoLen;
2667 DWORD MessageType;
2668 __C89_NAMELESS union {
2669 PVOID ContextInformation;
2670 ULONG64 SpaceHolderForWow64;
2671 };
2672 DWORD flags;
2673 DWORD KeySpec;
2674 ULONG nCardNameOffset;
2675 ULONG nReaderNameOffset;
2676 ULONG nContainerNameOffset;
2677 ULONG nCSPNameOffset;
2678 TCHAR bBuffer;
2679 } KERB_SMARTCARD_CSP_INFO, *PKERB_SMARTCARD_CSP_INFO;
2680
2681#endif
2682
2683 BOOLEAN WINAPI AuditComputeEffectivePolicyBySid(
2684 const PSID pSid,
2685 const GUID *pSubCategoryGuids,
2686 ULONG PolicyCount,
2687 PAUDIT_POLICY_INFORMATION *ppAuditPolicy
2688 );
2689
2690 VOID WINAPI AuditFree(
2691 PVOID Buffer
2692 );
2693
2694 BOOLEAN WINAPI AuditSetSystemPolicy(
2695 PCAUDIT_POLICY_INFORMATION pAuditPolicy,
2696 ULONG PolicyCount
2697 );
2698
2699 BOOLEAN WINAPI AuditQuerySystemPolicy(
2700 const GUID *pSubCategoryGuids,
2701 ULONG PolicyCount,
2702 PAUDIT_POLICY_INFORMATION *ppAuditPolicy
2703 );
2704
2705 BOOLEAN WINAPI AuditSetPerUserPolicy(
2706 const PSID pSid,
2707 PCAUDIT_POLICY_INFORMATION pAuditPolicy,
2708 ULONG PolicyCount
2709 );
2710
2711 BOOLEAN WINAPI AuditQueryPerUserPolicy(
2712 const PSID pSid,
2713 const GUID *pSubCategoryGuids,
2714 ULONG PolicyCount,
2715 PAUDIT_POLICY_INFORMATION *ppAuditPolicy
2716 );
2717
2718 BOOLEAN WINAPI AuditComputeEffectivePolicyByToken(
2719 HANDLE hTokenHandle,
2720 const GUID *pSubCategoryGuids,
2721 ULONG PolicyCount,
2722 PAUDIT_POLICY_INFORMATION *ppAuditPolicy
2723 );
2724
2725 BOOLEAN WINAPI AuditEnumerateCategories(
2726 GUID **ppAuditCategoriesArray,
2727 PULONG pCountReturned
2728 );
2729
2730 BOOLEAN WINAPI AuditEnumeratePerUserPolicy(
2731 PPOLICY_AUDIT_SID_ARRAY *ppAuditSidArray
2732 );
2733
2734 BOOLEAN WINAPI AuditEnumerateSubCategories(
2735 const GUID *pAuditCategoryGuid,
2736 BOOLEAN bRetrieveAllSubCategories,
2737 GUID **ppAuditSubCategoriesArray,
2738 PULONG pCountReturned
2739 );
2740
2741 BOOLEAN WINAPI AuditLookupCategoryGuidFromCategoryId(
2742 POLICY_AUDIT_EVENT_TYPE AuditCategoryId,
2743 GUID *pAuditCategoryGuid
2744 );
2745
2746 BOOLEAN WINAPI AuditQuerySecurity(
2747 SECURITY_INFORMATION SecurityInformation,
2748 PSECURITY_DESCRIPTOR *ppSecurityDescriptor
2749 );
2750
2751#define AuditLookupSubCategoryName __MINGW_NAME_AW(AuditLookupSubCategoryName)
2752#define AuditLookupCategoryName __MINGW_NAME_AW(AuditLookupCategoryName)
2753
2754 BOOLEAN WINAPI AuditLookupSubCategoryNameA(
2755 const GUID *pAuditSubCategoryGuid,
2756 LPSTR *ppszSubCategoryName
2757 );
2758
2759 BOOLEAN WINAPI AuditLookupSubCategoryNameW(
2760 const GUID *pAuditSubCategoryGuid,
2761 LPWSTR *ppszSubCategoryName
2762 );
2763
2764 BOOLEAN WINAPI AuditLookupCategoryNameA(
2765 const GUID *pAuditCategoryGuid,
2766 LPSTR *ppszCategoryName
2767 );
2768
2769 BOOLEAN WINAPI AuditLookupCategoryNameW(
2770 const GUID *pAuditCategoryGuid,
2771 LPWSTR *ppszCategoryName
2772 );
2773
2774 BOOLEAN WINAPI AuditLookupCategoryIdFromCategoryGuid(
2775 const GUID *pAuditCategoryGuid,
2776 PPOLICY_AUDIT_EVENT_TYPE pAuditCategoryId
2777 );
2778
2779 BOOLEAN WINAPI AuditSetSecurity(
2780 SECURITY_INFORMATION SecurityInformation,
2781 PSECURITY_DESCRIPTOR pSecurityDescriptor
2782 );
2783
2784 BOOLEAN NTAPI AuditSetGlobalSaclW(
2785 PCWSTR ObjectTypeName,
2786 PACL Acl
2787 );
2788
2789 BOOLEAN NTAPI AuditSetGlobalSaclA(
2790 PCSTR ObjectTypeName,
2791 PACL Acl
2792 );
2793
2794#define AuditSetGlobalSacl __MINGW_NAME_AW(AuditSetGlobalSacl)
2795
2796 BOOLEAN NTAPI AuditQueryGlobalSaclW(
2797 PCWSTR ObjectTypeName,
2798 PACL *Acl
2799 );
2800
2801 BOOLEAN NTAPI AuditQueryGlobalSaclA(
2802 PCSTR ObjectTypeName,
2803 PACL *Acl
2804 );
2805
2806#define AuditQueryGlobalSacl __MINGW_NAME_AW(AuditQueryGlobalSacl)
2807
2808#if _WIN32_WINNT >= 0x0601
2809
2810#define PKU2U_PACKAGE_NAME_A "pku2u"
2811#define PKU2U_PACKAGE_NAME L"pku2u"
2812#define PKU2U_PACKAGE_NAME_W PKU2U_PACKAGE_NAME
2813
2814 typedef struct _PKU2U_CERT_BLOB {
2815 ULONG CertOffset;
2816 USHORT CertLength;
2817 } PKU2U_CERT_BLOB, *PPKU2U_CERT_BLOB;
2818
2819#define PKU2U_CREDUI_CONTEXT_VERSION 0x4154414454524543
2820
2821 typedef struct _PKU2U_CREDUI_CONTEXT {
2822 ULONG64 Version;
2823 USHORT cbHeaderLength;
2824 ULONG cbStructureLength;
2825 USHORT CertArrayCount;
2826 ULONG CertArrayOffset;
2827 } PKU2U_CREDUI_CONTEXT, *PPKU2U_CREDUI_CONTEXT;
2828
2829 typedef enum _PKU2U_LOGON_SUBMIT_TYPE {
2830 Pku2uCertificateS4ULogon = 14
2831 } PKU2U_LOGON_SUBMIT_TYPE, *PPKU2U_LOGON_SUBMIT_TYPE;
2832
2833 typedef struct _PKU2U_CERTIFICATE_S4U_LOGON {
2834 PKU2U_LOGON_SUBMIT_TYPE MessageType;
2835 ULONG Flags;
2836 UNICODE_STRING UserPrincipalName;
2837 UNICODE_STRING DomainName;
2838 ULONG CertificateLength;
2839 PUCHAR Certificate;
2840 } PKU2U_CERTIFICATE_S4U_LOGON, *PPKU2U_CERTIFICATE_S4U_LOGON;
2841
2842#endif
2843
2844#ifdef __cplusplus
2845}
2846#endif
2847#endif