Application Requests a Named RAP Transaction

An application can perform Remote Administration Protocol (RAP) operations from CIFS. The application MUST provide Client.Session and Client.TreeConnect. Client.TreeConnect.ShareName MUST indicate the IPC$ interprocess communications share.

The SMB Transaction subprotocol (SMB_COM_TRANSACTION and SMB_COM_TRANSACTION_SECONDARY) is used to transfer RAP operations. RAP uses the \PIPE\LANMAN named pipe in the IPC$ share. RAP has its own set of function codes and does not use the Transaction subcommands listed in section 2.2.5. For a full decryption, see [MS-RAP].