KERB_QUERY_DOMAIN_EXTENDED_POLICIES_RESPONSE structure

Contains the results of querying for the extended policies of the specified domain. You must have the SeTcbPrivilege privilege set.

Syntax


typedef struct _KERB_QUERY_DOMAIN_EXTENDED_POLICIES_RESPONSE {
  KERB_PROTOCOL_MESSAGE_TYPE MessageType;
  ULONG                      Flags;
  UNICODE_STRING             ExtendedPolicies;
  ULONG                      DsFlags;
} KERB_QUERY_DOMAIN_EXTENDED_POLICIES_RESPONSE, *PKERB_QUERY_DOMAIN_EXTENDED_POLICIES_RESPONSE;

Members

MessageType

A value of the KERB_PROTOCOL_MESSAGE_TYPE enumeration that lists the types of messages that can be sent to the Kerberos authentication package by calling the LsaCallAuthenticationPackage function. This member must be set to KerbQueryDomainExtendedPoliciesMessage.

Flags

Contains flags used for the extended policies.

ValueMeaning
KERB_QUERY_DOMAIN_EXTENDED_POLICIES_RESPONSE_FLAG_DAC_DISABLED
0x1

The Dynamic Access Control (DAC) is disabled so you can't get the extended policies.

 

ExtendedPolicies

The name of the domain that you are querying for the extended policies.

DsFlags

Flags that represent the requirements. These flags are returned from the DsGetDcName function.

Requirements

Minimum supported client

Windows 8 [desktop apps only]

Minimum supported server

Windows Server 2012 [desktop apps only]

Header

Ntsecapi.h

 

 

Show: