SamrCreateGroupInDomain (Opnum 10)

The SamrCreateGroupInDomain method creates a group object within a domain.

 long SamrCreateGroupInDomain(
   [in] SAMPR_HANDLE DomainHandle,
   [in] unsigned long DesiredAccess,
   [out] SAMPR_HANDLE* GroupHandle,
   [out] unsigned long* RelativeId

DomainHandle: An RPC context handle, as specified in section, representing a domain object.

Name: The value to use as the name of the group. Details on how this value maps to the data model are provided later in this section.

DesiredAccess: The access requested on the GroupHandle on output. See section for a listing of possible values.

GroupHandle: An RPC context handle, as specified in section

RelativeId: The RID of the newly created group.

This protocol asks the RPC runtime, via the strict_context_handle attribute, to reject the use of context handles created by a method of a different RPC interface than this one, as specified in [MS-RPCE] section 3.

This method MUST be processed per the specifications in section, using a group type of GROUP_TYPE_SECURITY_ACCOUNT and using access mask values from section