2.2.2.10 VERSION
The VERSION structure contains Windows version information that SHOULD be ignored. This structure is used for debugging purposes only and its value does not affect NTLM message processing. It is present in the NEGOTIATE_MESSAGE, CHALLENGE_MESSAGE, and AUTHENTICATE_MESSAGE messages only if NTLMSSP_NEGOTIATE_VERSION is negotiated.<28>
|
0 |
1 |
2 |
3 |
4 |
5 |
6 |
7 |
8 |
9 |
1 0 |
1 |
2 |
3 |
4 |
5 |
6 |
7 |
8 |
9 |
2 0 |
1 |
2 |
3 |
4 |
5 |
6 |
7 |
8 |
9 |
3 0 |
1 |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
ProductMajorVersion |
ProductMinorVersion |
ProductBuild |
|||||||||||||||||||||||||||||
|
Reserved |
NTLMRevisionCurrent |
||||||||||||||||||||||||||||||
-
ProductMajorVersion (1 byte): An 8-bit unsigned integer that contains the minor version number of the Windows operating system in use. This field SHOULD contain one of the following values:<29>
-
Value Meaning WINDOWS_MAJOR_VERSION_5
0x05The major version of the Windows operating system is 0x05.
WINDOWS_MAJOR_VERSION_6
0x06The major version of the Windows operating system is 0x06.
-
ProductMinorVersion (1 byte): An 8-bit unsigned integer that contains the minor version number of the Windows operating system in use. This field SHOULD contain one of the following values:<30>
-
Value Meaning WINDOWS_MINOR_VERSION_0
0x00The minor version of the Windows operating system is 0x00.
WINDOWS_MINOR_VERSION_1
0x01The minor version of the Windows operating system is 0x01.
WINDOWS_MINOR_VERSION_2
0x02The minor version of the Windows operating system is 0x02.
-
ProductBuild (2 bytes): A 16-bit unsigned integer that contains the build number of the Windows operating system in use. This field SHOULD be set to a 16-bit quantity that identifies the operating system build number.
-
Reserved (3 bytes): A 24-bit data area that SHOULD be set to zero and MUST be ignored by the recipient.
-
NTLMRevisionCurrent (1 byte): An 8-bit unsigned integer that contains a value indicating the current revision of the NTLMSSP in use. This field SHOULD contain the following value:
-
Value Meaning NTLMSSP_REVISION_W2K3
0x0FVersion 15 of the NTLMSSP is in use.
