Was this page helpful?
Additional feedback?
1500 characters remaining
Export (0) Print
Expand All

2.2.2.10 VERSION

The VERSION structure contains Windows version information that SHOULD be ignored. This structure is used for debugging purposes only and its value does not affect NTLM message processing. It is populated in the NEGOTIATE_MESSAGE, CHALLENGE_MESSAGE, and AUTHENTICATE_MESSAGE messages only if NTLMSSP_NEGOTIATE_VERSION is negotiated.<29><30>


0


1


2


3


4


5


6


7


8


9

1
0


1


2


3


4


5


6


7


8


9

2
0


1


2


3


4


5


6


7


8


9

3
0


1

ProductMajorVersion

ProductMinorVersion

ProductBuild

Reserved

NTLMRevisionCurrent

ProductMajorVersion (1 byte): An 8-bit unsigned integer that contains the major version number of the Windows operating system in use. This field SHOULD contain one of the following values:

Value

Meaning

WINDOWS_MAJOR_VERSION_5

0x05

The major version of the Windows operating system is 0x05.

WINDOWS_MAJOR_VERSION_6

0x06

The major version of the Windows operating system is 0x06.

WINDOWS_MAJOR_VERSION_10

0x0A

The major version of the Windows operating system is 0x0A.

ProductMinorVersion (1 byte): An 8-bit unsigned integer that contains the minor version number of the Windows operating system in use. This field SHOULD contain one of the following values:

Value

Meaning

WINDOWS_MINOR_VERSION_0

0x00

The minor version of the Windows operating system is 0x00.

WINDOWS_MINOR_VERSION_1

0x01

The minor version of the Windows operating system is 0x01.

WINDOWS_MINOR_VERSION_2

0x02

The minor version of the Windows operating system is 0x02.

WINDOWS_MINOR_VERSION_3

0x03

The minor version of the Windows operating system is 0x03.

ProductBuild (2 bytes): A 16-bit unsigned integer that contains the build number of the Windows operating system in use. This field SHOULD be set to a 16-bit quantity that identifies the operating system build number.

Reserved (3 bytes): A 24-bit data area that SHOULD be set to zero and MUST be ignored by the recipient.

NTLMRevisionCurrent (1 byte): An 8-bit unsigned integer that contains a value indicating the current revision of the NTLMSSP in use. This field SHOULD contain the following value:

Value

Meaning

NTLMSSP_REVISION_W2K3

0x0F

Version 15 of the NTLMSSP is in use.

Show:
© 2016 Microsoft