Msv1_0SubAuthenticationRoutineEx function
Performs Remote Access Service authentication when subauthentication is requested by calling the LogonUser function.
The security principal's credentials and information from the Security Accounts Manager (SAM) database are passed to this function for authentication.
This function is implemented by custom subauthentication package DLLs for use with the MSV1_0 authentication package.
This function is called only for a noninteractive authentication, only on the authenticating server where the account resides, and only if a subauthentication DLL is registered under the correct key in the registry.
Syntax
NTSTATUS WINAPI Msv1_0SubAuthenticationRoutineEx( _In_ NETLOGON_LOGON_INFO_CLASS LogonLevel, _In_ PVOID LogonInformation, _In_ ULONG Flags, _In_ PUSER_ALL_INFORMATION UserAll, _In_ SAM_HANDLE UserHandle, _Inout_ PMSV1_0_VALIDATION_INFO ValidationInfo, _Out_ PULONG ActionsPerformed );
Parameters
- LogonLevel [in]
-
Specifies the level of information given in the LogonInformation parameter. This parameter is normally set to NetlogonInteractiveInformation.
- LogonInformation [in]
-
A pointer to a NETLOGON_LOGON_IDENTITY_INFO structure. Members of this structure contain information about the user who is logging on. The LogonDomainName member of this structure is ignored.
- Flags [in]
-
Optional. Contains flags that describe the circumstances of the logon. This parameter can be one of the following values.
Value Meaning - MSV1_0_PASSTHRU
Pass-through authentication. The user is not connecting to this computer.
- MSV1_0_GUEST_LOGON
This is a retry of the logon using the GUEST user account.
- UserAll [in]
-
A pointer to a USER_ALL_INFORMATION structure that contains the description of the user as returned from the SAM database.
- UserHandle [in]
-
A handle to the user account.
- ValidationInfo [in, out]
-
A pointer to a MSV1_0_VALIDATION_INFO structure.
- ActionsPerformed [out]
-
The list of actions performed.
Return value
This function must return one of the following values.
| Return code | Description |
|---|---|
|
There was no error. |
|
The account is disabled. |
|
The account has expired. |
|
The account is locked out. |
|
LogonLevel is not valid. |
|
The user is not authorized to log on to the specified workstation. |
|
The specified user has no account. |
|
The password is expired. |
|
The account is marked to indicate that the password must be changed on the next logon. |
|
The password was not valid. |
Requirements
|
Minimum supported client |
Windows XP [desktop apps only] |
|---|---|
|
Minimum supported server |
Windows Server 2003 [desktop apps only] |
|
Header |
|