Win32_NetworkLoginProfile class

The Win32_NetworkLoginProfile WMI class represents the network login information of a specific user on a computer system running Windows. This includes, but is not limited to password status, access privileges, disk quotas, and logon directory paths.

The following syntax is simplified from Managed Object Format (MOF) code and includes all of the inherited properties.

Syntax

class Win32_NetworkLoginProfile : CIM_Setting
{
  datetime AccountExpires;
  uint32   AuthorizationFlags;
  uint32   BadPasswordCount;
  string   Caption;
  uint32   CodePage;
  string   Comment;
  uint32   CountryCode;
  string   Description;
  uint32   Flags;
  string   FullName;
  string   HomeDirectory;
  string   HomeDirectoryDrive;
  datetime LastLogoff;
  datetime LastLogon;
  string   LogonHours;
  string   LogonServer;
  uint64   MaximumStorage;
  string   Name;
  uint32   NumberOfLogons;
  string   Parameters;
  datetime PasswordAge;
  datetime PasswordExpires;
  uint32   PrimaryGroupId;
  uint32   Privileges;
  string   Profile;
  string   ScriptPath;
  string   SettingID;
  uint32   UnitsPerWeek;
  string   UserComment;
  uint32   UserId;
  string   UserType;
  string   Workstations;
};

Members

The Win32_NetworkLoginProfile class has these types of members:

• Properties

Properties

The Win32_NetworkLoginProfile class has these properties.

AccountExpires

Data type: datetime

Access type: Read-only

Account will expire. This value is calculated from the number of seconds elapsed since 00:00:00, January 1, 1970, and is set in this format: yyyymmddhhmmss.mmmmmm sutc.

Example: 20521201000230.000000 000

AuthorizationFlags

Data type: uint32

Access type: Read-only

Set of flags that specify the resources a user is authorized to use or modify.

Value	Meaning
1 (0x1)	Printer
2 (0x2)	Communication
4 (0x4)	Server
8 (0x8)	Accounts

 

BadPasswordCount

Data type: uint32

Access type: Read-only

Number of times the user enters a bad password when logging on to a computer system running Windows.

Example: 0

Caption

Data type: string

Access type: Read-only

Short description of the CIM_Setting object.

CodePage

Data type: uint32

Access type: Read-only

Code page for the user's language of choice. A code page is the character set used.

Comment

Data type: string

Access type: Read-only

Comment or description for this logon profile.

CountryCode

Data type: uint32

Access type: Read-only

Country/region code for the user's language of choice.

Description

Data type: string

Access type: Read-only

Description of the CIM_Setting object.

Flags

Data type: uint32

Access type: Read-only

The properties available to this network profile.

Properties that can be set include:

Value	Meaning
1 (0x1)	Script A logon script executed. This value must be set for LAN Manager 2.0, Windows 2000, and Windows NT.
2 (0x2)	Account Disabled The user's account is disabled.
8 (0x8)	Home Directory Required A home directory is required. Windows 2000 and Windows NT:  This value is ignored.
16 (0x10)	Lockout The account is currently locked out. For NetUserSetInfo, this value can be cleared to unlock a previously locked account. This value cannot be used to lock a previously unlocked account.
32 (0x20)	Password Not Required No password is required.
64 (0x40)	Password Cannot Change The user cannot change the password.
128 (0x80)	Encrypted Test Password Allowed Windows 2000:  The user's password is stored under reversible encryption in the Active Directory.
256 (0x100)	Temp Duplicate Account An account for users whose primary account is in another domain. This account provides user access to this domain, but not to any domain that trusts this domain. The User Manager refers to this account type as a local user account.
512 (0x200)	Normal Account Default account type that represents a typical user.
2048 (0x800)	Interdomain Trust Account A permit to a trust account for a domain that trusts other domains.
4096 (0x1000)	Workstation Trust Account A computer account for a Windows 2000 and Windows NT workstation or a Windows 2000 and Windows NT server that is a member of this domain.
8192 (0x2000)	Server Trust Account A computer account for a backup domain controller that is a member of this domain.
65536 (0x10000)	Do Not Expire Password Windows 2000 and Windows NT:  The password must never expire on the account.
131072 (0x20000)	MNS Logon Account Majority Node Set (MNS) logon account type that represents an MNS user.
262144 (0x40000)	Smartcard Required Windows 2000:  Requires the user to log on to the user account with a smart card.
524288 (0x80000)	Trusted for Delegation Windows 2000:  The account is enabled for delegation. This is a security-sensitive setting; accounts with this option enabled must be tightly controlled. This setting allows a service running under the account to assume a client's identity and authenticate as that user to other remote servers on the network.
1048576 (0x100000)	Not Delegated Windows 2000:  Marks the account as "sensitive"; other users cannot act as delegates of this user account.
2097152 (0x200000)	Use DES Key Only Windows 2000:  Restrict this principal to use only Data Encryption Standard (DES) encryption types for keys.
4194304 (0x400000)	Do Not Require Preauthorization Windows 2000:  This account does not require Kerberos preauthentication for logon.
8388608 (0x800000)	Password Expired Indicates that the password has expired.

 

The following properties describe the account type. Only one value can be set:

• UF_NORMAL_ACCOUNT
• UF_TEMP_DUPLICATE_ACCOUNT
• UF_WORKSTATION_TRUST_ACCOUNT
• UF_SERVER_TRUST_ACCOUNT
• UF_INTERDOMAIN_TRUST_ACCOUNT

FullName

Data type: string

Access type: Read-only

Full name of the user belonging to the network login profile. This string can be empty if the user chooses not to associate a full name with a user name.

HomeDirectory

Data type: string

Access type: Read-only

Path to the home directory of the user. This string may be empty if the user chooses not to specify a home directory.

Example:"\HOMEDIR"

HomeDirectoryDrive

Data type: string

Access type: Read-only

Drive letter assigned to the user's home directory for log on purposes.

Example: "C:"

LastLogoff

Data type: datetime

Access type: Read-only

User last logged off the system. This value is calculated from the number of seconds elapsed since 00:00:00, January 1, 1970. A value of " **************.******+*** " means that the last logoff time is unknown. The format of this value is yyyymmddhhmmss.mmmmmm sutc.

Example: 19521201000230.000000 000

LastLogon

Data type: datetime

Access type: Read-only

User last logged on to the system. This value is calculated from the number of seconds elapsed since 00:00:00, January 1, 1970. The format of this value is yyyymmddhhmmss.mmmmmm sutc.

Example: 19521201000230.000000 000

LogonHours

Data type: string

Access type: Read-only

Qualifiers: MaxLen (147)

Times during the week when the user can log on. Each bit represents a unit of time specified by the UnitsPerWeek property. For instance, if the unit of time is hourly, the first bit (bit 0, word 0) is Sunday, 0:00 to 0:59, the second bit (bit 1, word 0) is Sunday, 1:00 to 1:59, and so on. If this member is set to NULL, then there is no time restriction. The time is set to GMT and must be adjusted for other time zones (for example, GMT minus 8 hours for PST).

LogonServer

Data type: string

Access type: Read-only

Name of the server to which logon requests are sent. Server names should be preceded by two backslashes (\\). A server name with an asterisk (\\*) indicates that the logon request can be handled by any logon server. A null string indicates that requests are sent to the domain controller.

Example: "\\MyServer"

MaximumStorage

Data type: uint64

Access type: Read-only

Qualifiers: Units (Bytes)

Maximum amount of disk space available to the user. If MaximumStorage is set to USER_MAXSTORAGE_UNLIMITED, the user is allowed to use all of the available disk space.

Example: 10000000

For more information about using uint64 values in scripts, see Scripting in WMI.

Name

Data type: string

Access type: Read-only

Qualifiers: Key, MaxLen (256)

User account on a particular domain or computer. The number of characters in the name cannot exceed the value of UNLEN.

Example: "somedomain\johndoe"

NumberOfLogons

Data type: uint32

Access type: Read-only

Number of successful times the user tried to log on to this account. A value of 0xFFFFFFFF indicates that the value is unknown. This property is maintained separately on each backup domain controller (BDC) in the domain. To get an accurate value, only the largest value from all BDCs should be used.

Example: 4

Parameters

Data type: string

Access type: Read-only

Space set aside for use by applications. This string can be null, or it can have any number of characters before the terminating null character. Microsoft products use this member to store user configuration information. Do not modify this information, because this value is specific to an application.

PasswordAge

Data type: datetime

Access type: Read-only

Length of time a password has been in effect. This value is measured from the number of seconds elapsed since the password was last changed.

Example: 00001201000230.000000 000

PasswordExpires

Data type: datetime

Access type: Read-only

Date and time the password expires. The value is set in this format: yyyymmddhhmmss.mmmmmm sutc

Example: 19521201000230.000000 000

PrimaryGroupId

Data type: uint32

Access type: Read-only

Relative identifier (RID) of the Primary Global Group for this user. The identifier verifies the primary group to which the user's profile belongs.

Privileges

Data type: uint32

Access type: Read-only

Level of privilege assigned to the usri3_name property.

Value	Meaning
0	Guest
1	User
2	Administrator

 

Profile

Data type: string

Access type: Read-only

Path to the user's profile. This value can be a null string, a local absolute path, or a UNC path. A user profile contains settings that are customizable for each user such as the desktop colors.

Example: "C:\Winnt"

ScriptPath

Data type: string

Access type: Read-only

Directory path to the user's logon script. A logon script automatically executes a set of commands each time a user logs on to a system.

Example: "C:\win\profiles\ThomasSteven"

SettingID

Data type: string

Access type: Read-only

Identifier by which the CIM_Setting object is known.

UnitsPerWeek

Data type: uint32

Access type: Read-only

Number of time units the week is divided into. It is used with the LogonHours property to limit user access to the computer.

Example: 168 (hours per week)

UserComment

Data type: string

Access type: Read-only

User-defined comment or description for this profile.

UserId

Data type: uint32

Access type: Read-only

RID of the user. The identifier verifies that the user exists and is unique to this domain.

UserType

Data type: string

Access type: Read-only

Type of account to which the user has privileges.

The values are:

• "Normal Account"
• "Duplicate Account"
• "Workstation Trust Account"
• "Server Trust Account"
• "Interdomain Trust Account"
• "Unknown"

Workstations

Data type: string

Access type: Read-only

Names of workstations from which the user can log on. Up to eight workstations can be specified; the names must be separated by commas (,). A null string indicates no restrictions. To disable logons from all workstations to this account, set the UF_ACCOUNTDISABLE in the Flags property of this class.

Remarks

The Win32_NetworkLoginProfile class is derived from CIM_Setting.

The calling process that uses this class must have the SE_RESTORE_NAME privilege on the computer in which the registry resides. For more information, see Executing Privileged Operations.

Examples

For script code examples, see WMI Tasks for Scripts and Applications and the TechNet ScriptCenter Script Repository.

For C++ code examples, see WMI C++ Application Examples.

Requirements

See also

Operating System Classes

Send comments about this topic to Microsoft

Build date: 11/19/2012