Edit

KERB_QUERY_DOMAIN_EXTENDED_POLICIES_RESPONSE structure (ntsecapi.h)

  • Article

Contains the results of querying for the extended policies of the specified domain. You must have the SeTcbPrivilege privilege set.

Syntax

typedef struct _KERB_QUERY_DOMAIN_EXTENDED_POLICIES_RESPONSE {
  KERB_PROTOCOL_MESSAGE_TYPE MessageType;
  ULONG                      Flags;
  ULONG                      ExtendedPolicies;
  ULONG                      DsFlags;
} KERB_QUERY_DOMAIN_EXTENDED_POLICIES_RESPONSE, *PKERB_QUERY_DOMAIN_EXTENDED_POLICIES_RESPONSE;

Members

MessageType

A value of the KERB_PROTOCOL_MESSAGE_TYPE enumeration that lists the types of messages that can be sent to the Kerberos authentication package by calling the LsaCallAuthenticationPackage function. This member must be set to KerbQueryDomainExtendedPoliciesMessage.

Flags

Contains flags used for the extended policies.

Value Meaning
KERB_QUERY_DOMAIN_EXTENDED_POLICIES_RESPONSE_FLAG_DAC_DISABLED
0x1
 The Dynamic Access Control (DAC) is disabled so you can't get the extended policies.

ExtendedPolicies

The name of the domain that you are querying for the extended policies.

DsFlags

Flags that represent the requirements. These flags are returned from the DsGetDcName function.

Requirements

Requirement Value
Minimum supported client Windows 8 [desktop apps only]
Minimum supported server Windows Server 2012 [desktop apps only]
Header ntsecapi.h