22.214.171.124.7 LsarGetSystemAccessAccount (Opnum 23)
The LsarGetSystemAccessAccount method is invoked to retrieve system access account flags for an account object. System access account flags are described as part of the account object data model, as specified in section 126.96.36.199.
NTSTATUS LsarGetSystemAccessAccount( [in] LSAPR_HANDLE AccountHandle, [out] unsigned long* SystemAccess );
SystemAccess: Used to return a bitmask of access flags associated with the account.
Return Values: The following is a summary of the return values that an implementation MUST return, as specified by the message processing that follows.
The request was successfully completed.
The caller does not have the permissions to perform this operation.
AccountHandle is not a valid handle.
This message takes two arguments:
AccountHandle: An open handle to an account object. If the handle is not a valid context handle to an account object or AccountHandle.HandleType does not equal "Account", the server MUST return STATUS_INVALID_HANDLE. The server MUST verify that AccountHandle grants access as specified in section 188.8.131.52.2 with RequiredAccess set to ACCOUNT_VIEW.
SystemAccess: Used to return a bitmask of system access bits.