Provides a mapping of WSPP tasks, scenarios, and protocols and a few implementation scenarios. This document is intended to be used together with the WSPP overview and reference documents, which are companion documents to the WSPP protocol specifications.

Click here to view this version of the [MS-SYS] PDF.

Contains a partial list of the objects that exist in the Active Directory schema (attributes beginning with A - L).

Click here to view this version of the [MS-ADA1] PDF.

Contains a partial list of the objects that exist in the Active Directory schema (attributes beginning with M).

Click here to view this version of the [MS-ADA2] PDF.

Contains a partial list of the objects that exist in the Active Directory schema (attributes beginning with N - Z).

Click here to view this version of the [MS-ADA3] PDF.

Used by a Web service (WS) resource to obtain configuration data about a security token service (STS) in order to validate tokens from that STS using the protocol defined in [MS-MWBF].

Click here to view this version of the [MS-ADFWAP] PDF.

Contains a list of the objects that exist in the Active Directory Lightweight Directory Services schema.

Click here to view this version of the [MS-ADLS] PDF.

Contains a partial list of objects that exist in the Active Directory schema.

Click here to view this version of the [MS-ADSC] PDF.

Specifies the Remote Data Services (RDS) Transport Protocol, a Microsoft proprietary protocol and an HTTP request/response protocol, that facilitates remote method definition and invocation, method definitions for executing database commands and for synchronizing database results, and that defines a record format for encoding of database results.

Click here to view this version of the [MS-ADTG] PDF.

Describes the state model for Active Directory.

Click here to view this version of the [MS-ADTS] PDF.

Supports a more generalized authentication exchange than the Internet Key Exchange Protocol and provides the optimizations in key exchange and policy discoverability.

Click here to view this version of the [MS-AIPS] PDF.

Specifies Authentication Protocol Domain Support, which is the communication process between a server and a domain controller that uses Netlogon interfaces to complete an authentication sequence.

Click here to view this version of the [MS-APDS] PDF.

Specifies how to encrypt secret values (such as cryptographic keys), so they can be backed up to storage that is not specially protected, and how to decrypt such values in the event recovery is necessary.

Click here to view this version of the [MS-BKRP] PDF.

Describes the network format of the Windows NT backup file format and its constituent structures that may be used in other protocols.

Click here to view this version of the [MS-BKUP] PDF.

Provides authentication for computers in an Active Directory domain in support of the BITS Peer-Caching Content Retrieval Protocol ([MS-BPCR]).

Click here to view this version of the [MS-BPAU] PDF.

One of the family of protocols that implements a distributed URL cache known as "BITS peer-caching". Other protocols in the family are used to discover potential peers and to authenticate them.

Click here to view this version of the [MS-BPCR] PDF.

Used to locate hosts in a domain that supports the URL-caching protocol implemented by BITS.

Click here to view this version of the [MS-BPDP] PDF.

Specification of the Common Internet File System (CIFS) Browser Protocol.

Click here to view this version of the [MS-BRWS] PDF.

Uses Extensible Authentication Protocol Method for Microsoft Challenge Handshake Authentication Protocol (CHAP) version 2 (EAP-MSCHAPv2) as an authentication method within the EAP-MSCHAPv2 framework.

Click here to view this version of the [MS-CHAP] PDF.

Specifies the syntax and interpretation of certificate templates, which form the basis of certificate management for the Certificate Templates Protocol Specification.

Click here to view this version of the [MS-CRTD] PDF.

Specifies the Certificate Services Remote Administration Protocol, which consists of a set of Distributed Component Object Model (DCOM) interfaces that allow administrative tools to configure the state and policy of a certification authority (CA) on a server.

Click here to view this version of the [MS-CSRA] PDF.

Defines a standard mechanism that may be used by a client to acquire a Security Token from a Security Token service (STS).

Click here to view this version of the [MS-CTAP] PDF.

Describes the Distributed Component Object Model Protocol (DCOM) that exposes application objects via remote procedure calls (RPCs) and consists of a set of extensions layered on the Microsoft Remote Procedure Call Extensions.

Click here to view this version of the [MS-DCOM] PDF.

Allows file system clients to resolve names from a namespace distributed across many servers and geographies into local names on specific file servers.

Click here to view this version of the [MS-DFSC] PDF.

Provides a remote procedure call (RPC) interface for administering DFS configurations. The client is an application that issues method calls on the RPC interface to administer DFS. The server is a DFS service that implements support for this RPC interface for administering DFS.

Click here to view this version of the [MS-DFSNM] PDF.

Is made up of a set of distributed component object model (DCOM) interfaces for configuring and monitoring DFS Replication Helper Protocols on a server.

Click here to view this version of the [MS-DFSRH] PDF.

Describes the Dynamic Host Configuration Protocol (DHCP), which specifies the Microsoft specific vendor-class options included in Microsoft's implementation of DHCP.

Click here to view this version of the [MS-DHCPE] PDF.

Describes the Dynamic Host Configuration Protocol (DHCP), which is designed to reduce the administrative burden and complexity of configuring hosts on a TCP/IP-based network, such as a private intranet, and which is one enforcement method supported by Network Access Protection (NAP).

Click here to view this version of the [MS-DHCPN] PDF.

Describes how the Active Directory objects are defined, updated, and interpreted, and works with the Distributed Link Tracking (DLT) Workstation Protocol and the DLT Central Manager Protocol, the two other protocols that make up Distributed Link Tracking.

Click here to view this version of the [MS-DLTCS] PDF.

Works with the Distributed Link Tracking (DLT) Workstation Protocol to discover the new location of a file that has moved. DLT can determine whether the file has moved on a mass-storage device, within a computer, or between computers in a network. The DLT Central Manager Protocol keeps track of file and volume moves and other relevant information from participating computers, so it can provide this information in response to workstation queries.

Click here to view this version of the [MS-DLTM] PDF.

Works with the Distributed Link Tracking (DLT) Central Manager Protocol to discover the new location of a file that has moved. DLT can determine whether the file has moved on a mass-storage device, within a computer, or between computers in a network. The DLT Workstation Protocol helps a computer locate files that have been moved within a computer or between computers in a computer network.

Click here to view this version of the [MS-DLTW] PDF.

Managing storage objects on a machine.

Click here to view this version of the [MS-DMRP] PDF.

Specifies the variations in the Windows implementation of the Digest Authentication protocol from the standard, as specified in [RFC2617].

Click here to view this version of the [MS-DPSP] PDF.

Specifies an RPC protocol for replication and management of data in Active Directory.

Click here to view this version of the [MS-DRSR] PDF.

Specifies extensions that are used to directory services in SOAP sessions.

Click here to view this version of the [MS-DSML] PDF.

Exposes an remote procedure call (RPC) interface that a client can call to obtain domain-related computer state and configuration information.

Click here to view this version of the [MS-DSSP] PDF.

Specifies encoding extended error information. This specification assumes that the reader has familiarity with the concepts and the requirements that are detailed in [MS-RPCE] and [C706].

Click here to view this version of the [MS-EERR] PDF.

Performs maintenance and management operations on encrypted data that is stored remotely and accessed over a network.

Click here to view this version of the [MS-EFSR] PDF.

An Enhanced Metafile Structure (EMF) is a collection of records that can store an image in an application-independent format. The stored image can be recreated by processing the records.

Click here to view this version of the [MS-EMF] PDF.

Enhanced Metafile Format Plus Extensions define a device-independent structure that encapsulates graphics commands and objects for storage or for sending to devices, such as displays and printers, which support the drawing of images, graphics, and text.

Click here to view this version of the [MS-EMFPLUS] PDF.

An EMF spool file is a collection of records that contain information to print a document outside the control of original application, either on the same computer, or on another computer.

Click here to view this version of the [MS-EMFSPOOL] PDF.

Exposes remote procedure call (RPC) methods for reading events in both live and backup event logs on remote computers and specifies how to get general information about a log.

Click here to view this version of the [MS-EVEN] PDF.

Exposes Remote Procedure Call (RPC) methods for reading events in both live and backup event logs on remote computers and specifies how to get general information about a log. This protocol addresses Windows Vista.

Click here to view this version of the [MS-EVEN6] PDF.

Specifies a set of server extensions that can be used to augment a basic HTTP server.

Click here to view this version of the [MS-FPSE] PDF.

Enables servers running Windows Server code name "Longhorn", Windows Server 2003, and Windows Server 2000 to replicate files and folders among servers on the network. This protocol enables duplicate files and folders to be maintained on multiple servers.

Click here to view this version of the [MS-FRS1] PDF.

Specifies an RPC interface that replicates files between servers and enables the creation of multimaster optimistic file replication systems.

Click here to view this version of the [MS-FRS2] PDF.

Defines the network format of native Windows structures that may be used within other protocols.

Click here to view this version of the [MS-FSCC] PDF.

Specifies the Deployed Printer Connections Extension to the Group Policy Protocol.

Click here to view this version of the [MS-GPDPC] PDF.

Folder Redirection is a Group Policy extension that provides a mechanism to relocate specific user folders to server disk volumes. File system access requests to a user's folders are automatically redirected to a newly created folder for each user.

Click here to view this version of the [MS-GPFR] PDF.

The Internet Explorer Maintenance Extension enables administrators to apply custom settings to the Internet Explorer configuration on one or more computers to enforce Internet-related security standards and provide a common browser interface within the organization.

Click here to view this version of the [MS-GPIE] PDF.

This document specifies the IPSec policy component's extension to the Group Policy protocol [MS-GPOL]. The transmitted configuration data enables centralized (common) configuration of the IPsec component on multiple client systems in order to provide basic traffic filtering, data integrity, and optionally, data encryption for TCP/IP traffic.

Click here to view this version of the [MS-GPIPSEC] PDF.

Communicates administrator-defined policies between a client and a domain controller (DC).

Click here to view this version of the [MS-GPOL] PDF.

Extension to Group Policy: Core Protocol [MS-GPOL] that provides a mechanism to manage and deploy policy preferences.

Click here to view this version of the [MS-GPPREF] PDF.

The Registry Extension Encoding Protocol extension to the Group Policy Protocol provides a mechanism for an administrator to control any behavior on a client that depends on registry-based settings.

Click here to view this version of the [MS-GPREG] PDF.

Specifies an extension to the Group Policy Protocol that enables security policies to be distributed to multiple client systems, so these systems can enact the policies in accordance with the intentions of the administrator.

Click here to view this version of the [MS-GPSB] PDF.

Specifies an extension to the Group Policy Protocol that provides a mechanism for an administrator to instruct an arbitrarily large group of clients to execute administrator-specified code at computer startup, computer shutdown, user log on, and user log off.

Click here to view this version of the [MS-GPSCR] PDF.

Enables an administrator to install and remove software applications at client computers.

Click here to view this version of the [MS-GPSI] PDF.

Specifies an extension to the Group Policy Protocol that specifies the behaviors of the Wireless/Wired Group Policy administrative-side and client-side plug-in extensions.

Click here to view this version of the [MS-GPWL] PDF.

Generic Security Service Algorithm for Secret Key Transaction Authentication for DNS (GSS-TSIG) identifies one possible extension to TSIG based on the Generic Security Service Application Program Interface (GSS-API).

Click here to view this version of the [MS-GSSA] PDF.

Allows a network endpoint to obtain digital certificates.

Click here to view this version of the [MS-HCEP] PDF.

This protocol is a subset of the Windows Client Certificate Enrollment Protocol, as specified in [MS-WCCE].

Click here to view this version of the [MS-ICPR] PDF.

Specifies extensions to the Internet Key Exchange (IKE) Protocol, as specified in [RFC2409].

Click here to view this version of the [MS-IKEE] PDF.

Specifies a set of RPC interfaces that allow clients to install cryptographic keys and their associated X.509 certificates on a remote server.

Click here to view this version of the [MS-IKEY] PDF.

Specifies the Microsoft implementation of the Kerberos Protocol, as specified in [RFC4120], by specifying any Windows behaviors that differ from the Kerberos Protocol, in addition to Windows extensions for interactive logon and the inclusion of authorization information expressed as group memberships and related information.

Click here to view this version of the [MS-KILE] PDF.

Specifies the Microsoft profile of the Link Local Multicast Name Resolution Protocol .

Click here to view this version of the [MS-LLMNRP] PDF.

Specifies a Microsoft-defined protocol for managing sundry machine and domain security policies.

Click here to view this version of the [MS-LSAD] PDF.

Specifies the Local Security Authority (Translation Methods) Remote Protocol, which is implemented in Windows products to translate identifiers for security principal between human-readable and machine-readable forms.

Click here to view this version of the [MS-LSAT] PDF.

Describes the Remote Mailslot Protocol, which is a Microsoft proprietary protocol and is a simple, unreliable, and unidirectional interprocess communications (IPC) protocol between a client and server.

Click here to view this version of the [MS-MAIL] PDF.

Allows a client to communicate with a server hosting an indexing service to issue queries.

Click here to view this version of the [MS-MCIS] PDF.

Used by a security token service (STS) proxy to obtain configuration data about an STS in order to assist users in selecting an acceptable security realm from which to obtain a security token.

Click here to view this version of the [MS-MFPP] PDF.

Specifies a set of remote procedure call (RPC) interfaces that instructs a server to display short text messages to a console user, to deliver messages to a local or remote server for display to a console user, and to manage the names for which the server receives messages.

Click here to view this version of the [MS-MSRP] PDF.

Specifies extensions to the Microsoft Web Browser Federated Sign-On Protocol and enables Web browser requestors that do not support scripting (to create POST messages) and enable passing security identifiers (SIDs) in Security Assertion Markup Language (SAML) V1.1 assertions. It is assumed that the reader is familiar with the terms, concepts, and protocol that are defined in [MS-MWBF].

Click here to view this version of the [MS-MWBE] PDF.

Describes the Microsoft Web Browser Federated Sign-On Protocol, which is primarily a restriction of the protocol that is specified in [WSFedPRP]. The restrictions are designed to enable greater interoperability by reducing the number of variations that must be implemented. This document also specifies minor additions to [WSFedPRP] to handle common scenarios.

Click here to view this version of the [MS-MWBF] PDF.

Used in Windows for authentication between clients and servers.

Click here to view this version of the [MS-NLMP] PDF.

Describes the Netlogon Remote Protocol, a Microsoft proprietary remote procedure call (RPC) interface, that is used for user and machine authentication on domain-based networks; to replicate the user account database for operating systems earlier than Windows 2000 backup domain controllers; to maintain domain relationships from the members of a domain to the domain controller, among domain controllers for a domain, and between domain controllers across domains; and to discover and manage these relationships.

Click here to view this version of the [MS-NRPC] PDF.

Microsoft provides support for NT LAN Manager (NTLM) (as specified in [MS-NLMP]) authentication in Microsoft Internet Explorer and Microsoft Internet Information Services (IIS) that uses the HTTP protocol in addition to other standard authentication mechanisms.

Click here to view this version of the [MS-NTHT] PDF.

Describes the OLE Automation Protocol, a Microsoft proprietary protocol that uses DCOM as its transport layer and provides support for an additional set of types as well as for a late-bound calling mechanism.

Click here to view this version of the [MS-OAUT] PDF.

Specifies the structure used to encode authorization information. The Privilege Attribute Certificate also contains memberships, additional credential information, profile and policy information, and supporting security metadata.

Click here to view this version of the [MS-PAC] PDF.

Specifies an asynchronous protocol that clients use to receive print status notifications from a print server and send any server-requested responses to those notifications back to the server. It is based on the Remote Procedure Call (RPC) protocol, as specified in [C706].

Click here to view this version of the [MS-PAN] PDF.

Defines the communication of print job processing and print system management information between a print client and any print server.

Click here to view this version of the [MS-PAR] PDF.

Specifies how messages are encapsulated on the wire.

Click here to view this version of the [MS-PASS] PDF.

Adds security services to the Extensible Authentication Protocol methods.

Click here to view this version of the [MS-PEAP] PDF.

Enables the use of public key cryptography in the initial authentication exchange of the Kerberos Protocol and specifies the Windows implementation of PKINIT where it differs from [RFC4556].

Click here to view this version of the [MS-PKCA] PDF.

Used for resolving a name to a set of information, such as IP addresses and to maintain a network of nodes (referred to as a cloud), and to resolve names to their endpoint information when requested by a node within the cloud.

Click here to view this version of the [MS-PNRP] PDF.

Specification defines a Microsoft proprietary protocol that is referred to as the Proximity Service Discovery Protocol.

Click here to view this version of the [MS-PSDP] PDF.

Specifies an extension of the Microsoft Remote Administration Protocol (RAP) specification, which Microsoft LAN Manager uses to perform remote administrative functions and is included in the Microsoft Windows operating system for compatibility reasons.

Click here to view this version of the [MS-RAP] PDF.

Specifies a Microsoft proprietary protocol that allows servers to use a directory, database, or other technology to map the user's X.509 certificate to a security principal.

Click here to view this version of the [MS-RCMP] PDF.

Enables efficient synchronization of files with a remote source by using compression techniques to minimize the amount of data sent between a client and server.

Click here to view this version of the [MS-RDC] PDF.

Specifies the Rights Management Services Client/Server Protocol, which is a SOAP protocol, that is used to obtain and issue certificates and licenses used for creating and working with protected content.

Click here to view this version of the [MS-RMPR] PDF.

Used to communicate information between Rights Management Services (RMS) servers.

Click here to view this version of the [MS-RMPRS] PDF.

Specifies the Microsoft RADIUS vendor-specific attributes (VSAs) that are implemented in the Windows operating system.

Click here to view this version of the [MS-RNAP] PDF.

Specifies a set of extensions to the DCE Remote Procedure Call 1.1 Specification, as specified in [C706].

Click here to view this version of the [MS-RPCE] PDF.

Specifies the use of HTTP or HTTPS as a transport for the Remote Procedure Call (RPC) Protocol, as specified in [C706] and extended in [MS-RPCE].

Click here to view this version of the [MS-RPCH] PDF.

Specifies a set of extensions and restrictions to the DCE Remote Procedure Call Location Services specification as defined in [C706].

Click here to view this version of the [MS-RPCL] PDF.

Defines the communication of print job processing and print system management between a print client and any print server.

Click here to view this version of the [MS-RPRN] PDF.

The Windows Remote Registry Protocol is a remote procedure call (RPC)-based client/server protocol that is used for remotely managing a hierarchical data store such as the Windows registry. For more information, see [MSWINREG].

Click here to view this version of the [MS-RRP] PDF.

Specifies a set of distributed component object model (DCOM) interfaces for applications to manage robotic changers, media libraries, and tape drives. The Removable Storage Manager (RSM) Remote Protocol deals with detailed low-level operating system and storage concepts.

Click here to view this version of the [MS-RSMP] PDF.

Specifies the Remote Shutddown Protocol.

Click here to view this version of the [MS-RSP] PDF.

Supports printing and spooling operations that are synchronous between client and server.

Click here to view this version of the [MS-SAMR] PDF.

Specifies a Microsoft proprietary protocol where domain controllers (DCs) use to forward time-critical database changes to the primary domain controller (PDC), and to forward time-critical database changes from a read-only domain controller (RODC) to a writable NC replica within the same domain outside the normal replication protocol.

Click here to view this version of the [MS-SAMS] PDF.

Programmatically enumerates shadow copies and configures shadow copy storage on remote machines.

Click here to view this version of the [MS-SCMP] PDF.

Used for remotely managing the Service Control Manager (SCM), an RPC server that enables service configuration and control of service programs.

Click here to view this version of the [MS-SCMR] PDF.

Specifies two extensions to the Kerberos protocol as developed by Microsoft. These two extensions, collectively known as Service for User (S4U), enable an application service to obtain a Kerberos service ticket on behalf of a user.

Click here to view this version of the [MS-SFU] PDF.

Defines extensions to the existing Common Internet File System (CIFS) specification that have been implemented by Microsoft since the publication of the [CIFS] specification.

Click here to view this version of the [MS-SMB] PDF.

Supports the sharing of file and print resources between machines and extends the concepts from the Server Message Block Protocol.

Click here to view this version of the [MS-SMB2] PDF.

Specifies an authentication extension to the Network Time Protocol (NTP) version 3 ([RFC1305]) and the Simple Network Time Protocol (SNTP) version 4 ([RFC2030]).

Click here to view this version of the [MS-SNTP] PDF.

Specifies the Statement of Health (SoH) protocol in which a client and a server exchange SoH and Statement of Health Response (SoHR) messages. This protocol, and the appropriate authentication protocols, helps enterprises to ensure that users of their network resources are authenticated and are using systems that conform with corporate policies.

Click here to view this version of the [MS-SOH] PDF.

Explains and documents variations made by Microsoft when first implementing SPNEGO in the context of the current RFC, as specified in [RFC4178].

Click here to view this version of the [MS-SPNG] PDF.

Specifies the extensions to the DRS Protocol for transport over the Simple Mail Transfer Protocol (SMTP), which provide an alternate transport for the DRS protocol that may allow domain controllers to perform replication in environments where the RPC transport mechanism is unsuitable.

Click here to view this version of the [MS-SRPL] PDF.

Remotely enables file and printer sharing and named pipe access to the server through the Server Message Block Protocol.

Click here to view this version of the [MS-SRVS] PDF.

Facilitates interaction with a database server and provides for authentication and channel encryption negotiation; specification of requests in SQL (including Bulk Insert); invocation of a stored procedure, also known as a Remote Procedure Call (RPC); returning of data; and Transaction Manager Requests. It is an application layer request/response protocol.

Click here to view this version of the [MS-TDS] PDF.

Provide additional capabilities to Teredo, including support for more types of Network Address Translations (NATs) and for more efficient communication.

Click here to view this version of the [MS-TERE] PDF.

Specifies the authentication option to the Telnet protocol as a generic method for negotiating an authentication type and mode, including if encryption should be used and if credentials should be forwarded.

Click here to view this version of the [MS-TLSP] PDF.

Specifies the protocols used by the Task Scheduler Remoting Protocol to register and configure a task and to inquire about the status of running tasks on a remote machine.

Click here to view this version of the [MS-TSCH] PDF.

Maps Windows domain user and group account names to the POSIX user and group identifiers used in AUTH_UNIX authentication, and vice versa. This enables the association of user names for users who have different identities in Windows- and UNIX-based domains.

Click here to view this version of the [MS-UNMP] PDF.

Specifies Microsoft's extension to the IPv4 over IEEE 1394 protocol to support bridging and clarifies the implementation details as specified in [RFC2734] where necessary.

Click here to view this version of the [MS-V4OF] PDF.