4.1.2.1.5 DRS_ADDSID_FLAGS

  • Article

The DRS_ADDSID_FLAGS type consists of bit flags that indicate how the SID is to be added to the security principal.

The valid bit flags are shown in the following diagram. The flags are represented in little-endian byte order.


0


1


2


3


4


5


6


7


8


9

1
0


1


2


3


4


5


6


7


8


9

2
0


1


2


3


4


5


6


7


8


9

3
0


1

X

X

X

X

X

X

X

X

X

X

X

X

X

X

X

X

X

X

X

X

X

X

X

X

D E L

C S

X

X

X

X

X

X

X: Unused. MUST be zero and ignored.

CS (DS_ADDSID_FLAG_PRIVATE_CHK_SECURE, 0x40000000): If set, the server verifies whether the channel is secure and returns the result of the verification in the response.

DEL (DS_ADDSID_FLAG_PRIVATE_DEL_SRC_OBJ, 0x80000000): If set, the server appends the objectSid and sIDHistory attributes of SrcPrincipal to the sIDHistory attribute of DstPrincipal, and deletes SrcPrincipal from the source domain.

This type is declared as follows:

 typedef DWORD DRS_ADDSID_FLAGS;