2.2.1.3 Server ACCESS_MASK Values

These are the specific values available to describe the access control on a server object. A bitwise OR operation can be performed on these values, along with values from section 2.2.1.1. For more information on the message processing of these values, see section 3.1.5.1.1.

Constant/value

Description

SAM_SERVER_CONNECT

0x00000001

Specifies access control to obtain a server handle.

SAM_SERVER_SHUTDOWN

0x00000002

Does not specify any access control.

SAM_SERVER_INITIALIZE

0x00000004

Does not specify any access control.

SAM_SERVER_CREATE_DOMAIN

0x00000008

Does not specify any access control.

SAM_SERVER_ENUMERATE_DOMAINS

0x00000010

Specifies access control to view domain objects.

SAM_SERVER_LOOKUP_DOMAIN

0x00000020

Specifies access control to perform SID-to-name translation.

SAM_SERVER_ALL_ACCESS

0x000F003F

The specified accesses for a GENERIC_ALL request.

SAM_SERVER_READ

0x00020010

The specified accesses for a GENERIC_READ request.

SAM_SERVER_WRITE

0x0002000E

The specified accesses for a GENERIC_WRITE request.

SAM_SERVER_EXECUTE

0x00020021

The specified accesses for a GENERIC_EXECUTE request.