Module Description

System access control..

The following data type specifies the ways in which a user or member
of an alias or group may be allowed to access the system.
An account may be granted zero or more of these types of access to the system.
The types of access are:

Interactive

The user or alias/group member may interactively logon to the system.

Network

The user or alias/group member may access the system via the network (e.g, through shares).

Service

The user or alias may be activated as a service on the system.

Classes
struct	PPOLICY_PRIVILEGE_DEFINITION

Macros
#define	POLICY_MODE_INTERACTIVE SECURITY_ACCESS_INTERACTIVE_LOGON

#define	POLICY_MODE_NETWORK SECURITY_ACCESS_NETWORK_LOGON

#define	POLICY_MODE_BATCH SECURITY_ACCESS_BATCH_LOGON

#define	POLICY_MODE_SERVICE SECURITY_ACCESS_SERVICE_LOGON

#define	POLICY_MODE_PROXY SECURITY_ACCESS_PROXY_LOGON

#define	POLICY_MODE_DENY_INTERACTIVE SECURITY_ACCESS_DENY_INTERACTIVE_LOGON

#define	POLICY_MODE_DENY_NETWORK SECURITY_ACCESS_DENY_NETWORK_LOGON

#define	POLICY_MODE_DENY_BATCH SECURITY_ACCESS_DENY_BATCH_LOGON

#define	POLICY_MODE_DENY_SERVICE SECURITY_ACCESS_DENY_SERVICE_LOGON

#define	POLICY_MODE_REMOTE_INTERACTIVE SECURITY_ACCESS_REMOTE_INTERACTIVE_LOGON

#define	POLICY_MODE_DENY_REMOTE_INTERACTIVE SECURITY_ACCESS_DENY_REMOTE_INTERACTIVE_LOGON

#define	POLICY_MODE_ALL

#define	POLICY_MODE_ALL_NT4

#define	LSA_LOOKUP_ISOLATED_AS_LOCAL 0x80000000L

Typedefs
typedef ULONG	POLICY_SYSTEM_ACCESS_MODE

typedef ULONG *	PPOLICY_SYSTEM_ACCESS_MODE

Class Documentation

◆ POLICY_PRIVILEGE_DEFINITION

struct POLICY_PRIVILEGE_DEFINITION

Data type used to return information about privileges defined on a system.

Definition at line 809 of file UmLsa.h.

Class Members
LSA_UNICODE_STRING	Name
LUID	LocalValue

Macro Definition Documentation

◆ POLICY_MODE_INTERACTIVE

#define POLICY_MODE_INTERACTIVE SECURITY_ACCESS_INTERACTIVE_LOGON

Definition at line 782 of file UmLsa.h.

◆ POLICY_MODE_NETWORK

#define POLICY_MODE_NETWORK SECURITY_ACCESS_NETWORK_LOGON

Definition at line 783 of file UmLsa.h.

◆ POLICY_MODE_BATCH

#define POLICY_MODE_BATCH SECURITY_ACCESS_BATCH_LOGON

Definition at line 784 of file UmLsa.h.

◆ POLICY_MODE_SERVICE

#define POLICY_MODE_SERVICE SECURITY_ACCESS_SERVICE_LOGON

Definition at line 785 of file UmLsa.h.

◆ POLICY_MODE_PROXY

#define POLICY_MODE_PROXY SECURITY_ACCESS_PROXY_LOGON

Definition at line 786 of file UmLsa.h.

◆ POLICY_MODE_DENY_INTERACTIVE

#define POLICY_MODE_DENY_INTERACTIVE SECURITY_ACCESS_DENY_INTERACTIVE_LOGON

Definition at line 787 of file UmLsa.h.

◆ POLICY_MODE_DENY_NETWORK

#define POLICY_MODE_DENY_NETWORK SECURITY_ACCESS_DENY_NETWORK_LOGON

Definition at line 788 of file UmLsa.h.

◆ POLICY_MODE_DENY_BATCH

#define POLICY_MODE_DENY_BATCH SECURITY_ACCESS_DENY_BATCH_LOGON

Definition at line 789 of file UmLsa.h.

◆ POLICY_MODE_DENY_SERVICE

#define POLICY_MODE_DENY_SERVICE SECURITY_ACCESS_DENY_SERVICE_LOGON

Definition at line 790 of file UmLsa.h.

◆ POLICY_MODE_REMOTE_INTERACTIVE

#define POLICY_MODE_REMOTE_INTERACTIVE SECURITY_ACCESS_REMOTE_INTERACTIVE_LOGON

Definition at line 791 of file UmLsa.h.

◆ POLICY_MODE_DENY_REMOTE_INTERACTIVE

#define POLICY_MODE_DENY_REMOTE_INTERACTIVE SECURITY_ACCESS_DENY_REMOTE_INTERACTIVE_LOGON

Definition at line 792 of file UmLsa.h.

◆ POLICY_MODE_ALL

#define POLICY_MODE_ALL

Value:

( POLICY_MODE_INTERACTIVE | POLICY_MODE_NETWORK \
          | POLICY_MODE_BATCH | POLICY_MODE_SERVICE | POLICY_MODE_PROXY \
          | POLICY_MODE_DENY_INTERACTIVE | POLICY_MODE_DENY_NETWORK \
          | SECURITY_ACCESS_DENY_BATCH_LOGON | SECURITY_ACCESS_DENY_SERVICE_LOGON \
          | POLICY_MODE_REMOTE_INTERACTIVE | POLICY_MODE_DENY_REMOTE_INTERACTIVE )

Definition at line 794 of file UmLsa.h.

◆ POLICY_MODE_ALL_NT4

#define POLICY_MODE_ALL_NT4

Value:

( POLICY_MODE_INTERACTIVE | POLICY_MODE_NETWORK \

| POLICY_MODE_BATCH | POLICY_MODE_SERVICE | POLICY_MODE_PROXY )

POLICY_MODE_BATCH

#define POLICY_MODE_BATCH

Definition: UmLsa.h:784

POLICY_MODE_SERVICE

#define POLICY_MODE_SERVICE

Definition: UmLsa.h:785

POLICY_MODE_PROXY

#define POLICY_MODE_PROXY

Definition: UmLsa.h:786

POLICY_MODE_NETWORK

#define POLICY_MODE_NETWORK

Definition: UmLsa.h:783

POLICY_MODE_INTERACTIVE

#define POLICY_MODE_INTERACTIVE

Definition: UmLsa.h:782

Definition at line 801 of file UmLsa.h.

◆ LSA_LOOKUP_ISOLATED_AS_LOCAL

#define LSA_LOOKUP_ISOLATED_AS_LOCAL 0x80000000L

This flag controls LsaLookupNames2 such that isolated names, including UPN's, are not searched for off the machine.
Composite names (domain\username) are still sent off machine if necessary.

Definition at line 822 of file UmLsa.h.

Typedef Documentation

◆ POLICY_SYSTEM_ACCESS_MODE

typedef ULONG POLICY_SYSTEM_ACCESS_MODE

Definition at line 805 of file UmLsa.h.

◆ PPOLICY_SYSTEM_ACCESS_MODE

typedef ULONG * PPOLICY_SYSTEM_ACCESS_MODE