KERB_QUERY_DOMAIN_EXTENDED_POLICIES_RESPONSE structure
Contains the results of querying for the extended policies of the specified domain. You must have the SeTcbPrivilege privilege set.
Syntax
typedef struct _KERB_QUERY_DOMAIN_EXTENDED_POLICIES_RESPONSE { KERB_PROTOCOL_MESSAGE_TYPE MessageType; ULONG Flags; UNICODE_STRING ExtendedPolicies; ULONG DsFlags; } KERB_QUERY_DOMAIN_EXTENDED_POLICIES_RESPONSE, *PKERB_QUERY_DOMAIN_EXTENDED_POLICIES_RESPONSE;
Members
- MessageType
-
A value of the KERB_PROTOCOL_MESSAGE_TYPE enumeration that lists the types of messages that can be sent to the Kerberos authentication package by calling the LsaCallAuthenticationPackage function. This member must be set to KerbQueryDomainExtendedPoliciesMessage.
- Flags
-
Contains flags used for the extended policies.
Value Meaning - KERB_QUERY_DOMAIN_EXTENDED_POLICIES_RESPONSE_FLAG_DAC_DISABLED
- 0x1
The Dynamic Access Control (DAC) is disabled so you can't get the extended policies.
- ExtendedPolicies
-
The name of the domain that you are querying for the extended policies.
- DsFlags
-
Flags that represent the requirements. These flags are returned from the DsGetDcName function.
Requirements
|
Minimum supported client | Windows 8 [desktop apps only] |
|---|---|
|
Minimum supported server | Windows Server 2012 [desktop apps only] |
|
Header |
|
Send comments about this topic to Microsoft
Build date: 1/2/2013
