3.1.4.5 Account Object Methods

The message processing of methods in this section MUST use the abstract data model, as specified in section 3.1.1.3.

Method (opnum)

Summary

LsarCreateAccount (opnum 10)

Creates a new account object in the policy database.

LsarEnumerateAccounts (opnum 11)

Enumerates all account objects in the policy database.

LsarOpenAccount (opnum 17)

Opens a handle to an existing account object.

LsarEnumeratePrivilegesAccount (opnum 18)

Enumerates all rights and privileges of an account.

LsarAddPrivilegesToAccount (opnum 19)

Adds new privileges to an existing account object.

LsarRemovePrivilegesFromAccount (opnum 20)

Removes privileges from an existing account object.

LsarGetSystemAccessAccount (opnum 23)

Retrieves system access flags from the account object.

LsarSetSystemAccessAccount (opnum 24)

Sets system access flags on the account object.

LsarEnumerateAccountsWithUserRight (opnum 35)

Enumerates all account objects in the server's policy database that match a given user right.

LsarEnumerateAccountRights (opnum 36)

Enumerates all rights of an account object in the server's policy database.

LsarAddAccountRights (opnum 37)

Adds new rights to an account object in the server's policy database.

LsarRemoveAccountRights (opnum 38)

Removes rights from an account object in the server's policy database.