Process Hacker
Data Structures | Macros | Typedefs | Functions
ntlsa.h File Reference
#include <ntsecapi.h>

Go to the source code of this file.

Data Structures

struct  _POLICY_PRIVILEGE_DEFINITION
 

Macros

#define _NTDEF_
 
#define SECURITY_ACCESS_INTERACTIVE_LOGON   ((ULONG)0x00000001L)
 
#define SECURITY_ACCESS_NETWORK_LOGON   ((ULONG)0x00000002L)
 
#define SECURITY_ACCESS_BATCH_LOGON   ((ULONG)0x00000004L)
 
#define SECURITY_ACCESS_SERVICE_LOGON   ((ULONG)0x00000010L)
 
#define SECURITY_ACCESS_PROXY_LOGON   ((ULONG)0x00000020L)
 
#define SECURITY_ACCESS_DENY_INTERACTIVE_LOGON   ((ULONG)0x00000040L)
 
#define SECURITY_ACCESS_DENY_NETWORK_LOGON   ((ULONG)0x00000080L)
 
#define SECURITY_ACCESS_DENY_BATCH_LOGON   ((ULONG)0x00000100L)
 
#define SECURITY_ACCESS_DENY_SERVICE_LOGON   ((ULONG)0x00000200L)
 
#define SECURITY_ACCESS_REMOTE_INTERACTIVE_LOGON   ((ULONG)0x00000400L)
 
#define SECURITY_ACCESS_DENY_REMOTE_INTERACTIVE_LOGON   ((ULONG)0x00000800L)
 
#define POLICY_MODE_INTERACTIVE   SECURITY_ACCESS_INTERACTIVE_LOGON
 
#define POLICY_MODE_NETWORK   SECURITY_ACCESS_NETWORK_LOGON
 
#define POLICY_MODE_BATCH   SECURITY_ACCESS_BATCH_LOGON
 
#define POLICY_MODE_SERVICE   SECURITY_ACCESS_SERVICE_LOGON
 
#define POLICY_MODE_PROXY   SECURITY_ACCESS_PROXY_LOGON
 
#define POLICY_MODE_DENY_INTERACTIVE   SECURITY_ACCESS_DENY_INTERACTIVE_LOGON
 
#define POLICY_MODE_DENY_NETWORK   SECURITY_ACCESS_DENY_NETWORK_LOGON
 
#define POLICY_MODE_DENY_BATCH   SECURITY_ACCESS_DENY_BATCH_LOGON
 
#define POLICY_MODE_DENY_SERVICE   SECURITY_ACCESS_DENY_SERVICE_LOGON
 
#define POLICY_MODE_REMOTE_INTERACTIVE   SECURITY_ACCESS_REMOTE_INTERACTIVE_LOGON
 
#define POLICY_MODE_DENY_REMOTE_INTERACTIVE   SECURITY_ACCESS_DENY_REMOTE_INTERACTIVE_LOGON
 
#define POLICY_MODE_ALL
 
#define LSA_LOOKUP_ISOLATED_AS_LOCAL   0x80000000
 
#define ACCOUNT_VIEW   0x00000001
 
#define ACCOUNT_ADJUST_PRIVILEGES   0x00000002
 
#define ACCOUNT_ADJUST_QUOTAS   0x00000004
 
#define ACCOUNT_ADJUST_SYSTEM_ACCESS   0x00000008
 
#define ACCOUNT_ALL_ACCESS
 
#define ACCOUNT_READ   (STANDARD_RIGHTS_READ | ACCOUNT_VIEW)
 
#define ACCOUNT_WRITE
 
#define ACCOUNT_EXECUTE   (STANDARD_RIGHTS_EXECUTE)
 
#define TRUSTED_QUERY_DOMAIN_NAME   0x00000001
 
#define TRUSTED_QUERY_CONTROLLERS   0x00000002
 
#define TRUSTED_SET_CONTROLLERS   0x00000004
 
#define TRUSTED_QUERY_POSIX   0x00000008
 
#define TRUSTED_SET_POSIX   0x00000010
 
#define TRUSTED_SET_AUTH   0x00000020
 
#define TRUSTED_QUERY_AUTH   0x00000040
 
#define TRUSTED_ALL_ACCESS
 
#define TRUSTED_READ
 
#define TRUSTED_WRITE
 
#define TRUSTED_EXECUTE
 
#define SECRET_SET_VALUE   0x00000001
 
#define SECRET_QUERY_VALUE   0x00000002
 
#define SECRET_ALL_ACCESS
 
#define SECRET_READ
 
#define SECRET_WRITE
 
#define SECRET_EXECUTE   (STANDARD_RIGHTS_EXECUTE)
 
#define LSA_GLOBAL_SECRET_PREFIX   L"G$"
 
#define LSA_GLOBAL_SECRET_PREFIX_LENGTH   2
 
#define LSA_LOCAL_SECRET_PREFIX   L"L$"
 
#define LSA_LOCAL_SECRET_PREFIX_LENGTH   2
 
#define LSA_MACHINE_SECRET_PREFIX   L"M$"
 
#define LSA_MACHINE_SECRET_PREFIX_LENGTH   ((sizeof(LSA_MACHINE_SECRET_PREFIX) - sizeof(WCHAR)) / sizeof(WCHAR))
 
#define LSA_SECRET_MAXIMUM_COUNT   0x00001000L
 
#define LSA_SECRET_MAXIMUM_LENGTH   0x00000200L
 

Typedefs

typedef ULONG POLICY_SYSTEM_ACCESS_MODE
 
typedef ULONG * PPOLICY_SYSTEM_ACCESS_MODE
 
typedef struct
_POLICY_PRIVILEGE_DEFINITION 		POLICY_PRIVILEGE_DEFINITION
 
typedef struct
_POLICY_PRIVILEGE_DEFINITION * 		PPOLICY_PRIVILEGE_DEFINITION
 

Functions

NTSTATUS NTAPI LsaDelete (_In_ LSA_HANDLE ObjectHandle)
 
NTSTATUS NTAPI LsaQuerySecurityObject (_In_ LSA_HANDLE ObjectHandle, _In_ SECURITY_INFORMATION SecurityInformation, _Out_ PSECURITY_DESCRIPTOR *SecurityDescriptor)
 
NTSTATUS NTAPI LsaSetSecurityObject (_In_ LSA_HANDLE ObjectHandle, _In_ SECURITY_INFORMATION SecurityInformation, _In_ PSECURITY_DESCRIPTOR SecurityDescriptor)
 
NTSTATUS NTAPI LsaOpenPolicySce (_In_opt_ PLSA_UNICODE_STRING SystemName, _In_ PLSA_OBJECT_ATTRIBUTES ObjectAttributes, _In_ ACCESS_MASK DesiredAccess, _Out_ PLSA_HANDLE PolicyHandle)
 
NTSTATUS NTAPI LsaClearAuditLog (_In_ LSA_HANDLE PolicyHandle)
 
NTSTATUS NTAPI LsaEnumeratePrivileges (_In_ LSA_HANDLE PolicyHandle, _Inout_ PLSA_ENUMERATION_HANDLE EnumerationContext, _Out_ PVOID *Buffer, _In_ ULONG PreferedMaximumLength, _Out_ PULONG CountReturned)
 
NTSTATUS NTAPI LsaCreateAccount (_In_ LSA_HANDLE PolicyHandle, _In_ PSID AccountSid, _In_ ACCESS_MASK DesiredAccess, _Out_ PLSA_HANDLE AccountHandle)
 
NTSTATUS NTAPI LsaOpenAccount (_In_ LSA_HANDLE PolicyHandle, _In_ PSID AccountSid, _In_ ACCESS_MASK DesiredAccess, _Out_ PLSA_HANDLE AccountHandle)
 
NTSTATUS NTAPI LsaEnumerateAccounts (_In_ LSA_HANDLE PolicyHandle, _Inout_ PLSA_ENUMERATION_HANDLE EnumerationContext, _Out_ PVOID *Buffer, _In_ ULONG PreferedMaximumLength, _Out_ PULONG CountReturned)
 
NTSTATUS NTAPI LsaAddPrivilegesToAccount (_In_ LSA_HANDLE AccountHandle, _In_ PPRIVILEGE_SET Privileges)
 
NTSTATUS NTAPI LsaRemovePrivilegesFromAccount (_In_ LSA_HANDLE AccountHandle, _In_ BOOLEAN AllPrivileges, _In_opt_ PPRIVILEGE_SET Privileges)
 
NTSTATUS NTAPI LsaEnumeratePrivilegesOfAccount (_In_ LSA_HANDLE AccountHandle, _Out_ PPRIVILEGE_SET *Privileges)
 
NTSTATUS NTAPI LsaGetQuotasForAccount (_In_ LSA_HANDLE AccountHandle, _Out_ PQUOTA_LIMITS QuotaLimits)
 
NTSTATUS NTAPI LsaSetQuotasForAccount (_In_ LSA_HANDLE AccountHandle, _In_ PQUOTA_LIMITS QuotaLimits)
 
NTSTATUS NTAPI LsaGetSystemAccessAccount (_In_ LSA_HANDLE AccountHandle, _Out_ PULONG SystemAccess)
 
NTSTATUS NTAPI LsaSetSystemAccessAccount (_In_ LSA_HANDLE AccountHandle, _In_ ULONG SystemAccess)
 
NTSTATUS NTAPI LsaCreateTrustedDomain (_In_ LSA_HANDLE PolicyHandle, _In_ PLSA_TRUST_INFORMATION TrustedDomainInformation, _In_ ACCESS_MASK DesiredAccess, _Out_ PLSA_HANDLE TrustedDomainHandle)
 
NTSTATUS NTAPI LsaOpenTrustedDomain (_In_ LSA_HANDLE PolicyHandle, _In_ PSID TrustedDomainSid, _In_ ACCESS_MASK DesiredAccess, _Out_ PLSA_HANDLE TrustedDomainHandle)
 
NTSTATUS NTAPI LsaQueryInfoTrustedDomain (_In_ LSA_HANDLE TrustedDomainHandle, _In_ TRUSTED_INFORMATION_CLASS InformationClass, _Out_ PVOID *Buffer)
 
NTSTATUS NTAPI LsaSetInformationTrustedDomain (_In_ LSA_HANDLE TrustedDomainHandle, _In_ TRUSTED_INFORMATION_CLASS InformationClass, _In_ PVOID Buffer)
 
NTSTATUS NTAPI LsaCreateSecret (_In_ LSA_HANDLE PolicyHandle, _In_ PLSA_UNICODE_STRING SecretName, _In_ ACCESS_MASK DesiredAccess, _Out_ PLSA_HANDLE SecretHandle)
 
NTSTATUS NTAPI LsaOpenSecret (_In_ LSA_HANDLE PolicyHandle, _In_ PLSA_UNICODE_STRING SecretName, _In_ ACCESS_MASK DesiredAccess, _Out_ PLSA_HANDLE SecretHandle)
 
NTSTATUS NTAPI LsaSetSecret (_In_ LSA_HANDLE SecretHandle, _In_opt_ PLSA_UNICODE_STRING CurrentValue, _In_opt_ PLSA_UNICODE_STRING OldValue)
 
NTSTATUS NTAPI LsaQuerySecret (_In_ LSA_HANDLE SecretHandle, _Out_opt_ PLSA_UNICODE_STRING *CurrentValue, _Out_opt_ PLARGE_INTEGER CurrentValueSetTime, _Out_opt_ PLSA_UNICODE_STRING *OldValue, _Out_opt_ PLARGE_INTEGER OldValueSetTime)
 
NTSTATUS NTAPI LsaLookupPrivilegeValue (_In_ LSA_HANDLE PolicyHandle, _In_ PLSA_UNICODE_STRING Name, _Out_ PLUID Value)
 
NTSTATUS NTAPI LsaLookupPrivilegeName (_In_ LSA_HANDLE PolicyHandle, _In_ PLUID Value, _Out_ PLSA_UNICODE_STRING *Name)
 
NTSTATUS NTAPI LsaLookupPrivilegeDisplayName (_In_ LSA_HANDLE PolicyHandle, _In_ PLSA_UNICODE_STRING Name, _Out_ PLSA_UNICODE_STRING *DisplayName, _Out_ PSHORT LanguageReturned)
 
NTSTATUS NTAPI LsaChangePassword (_In_ PLSA_UNICODE_STRING ServerName, _In_ PLSA_UNICODE_STRING DomainName, _In_ PLSA_UNICODE_STRING AccountName, _In_ PLSA_UNICODE_STRING OldPassword, _In_ PLSA_UNICODE_STRING NewPassword)
 
NTSTATUS NTAPI LsaGetUserName (_Outptr_ PLSA_UNICODE_STRING *UserName, _Outptr_opt_ PLSA_UNICODE_STRING *DomainName)
 
NTSTATUS NTAPI LsaGetRemoteUserName (_In_opt_ PLSA_UNICODE_STRING SystemName, _Outptr_ PLSA_UNICODE_STRING *UserName, _Outptr_opt_ PLSA_UNICODE_STRING *DomainName)
 

Macro Definition Documentation

#define _NTDEF_

Definition at line 7 of file ntlsa.h.

#define ACCOUNT_ADJUST_PRIVILEGES   0x00000002

Definition at line 114 of file ntlsa.h.

#define ACCOUNT_ADJUST_QUOTAS   0x00000004

Definition at line 115 of file ntlsa.h.

#define ACCOUNT_ADJUST_SYSTEM_ACCESS   0x00000008

Definition at line 116 of file ntlsa.h.

#define ACCOUNT_ALL_ACCESS
Value:
(STANDARD_RIGHTS_REQUIRED | \
ACCOUNT_VIEW | \
ACCOUNT_ADJUST_PRIVILEGES | \
ACCOUNT_ADJUST_QUOTAS | \
ACCOUNT_ADJUST_SYSTEM_ACCESS)

Definition at line 117 of file ntlsa.h.

#define ACCOUNT_EXECUTE   (STANDARD_RIGHTS_EXECUTE)

Definition at line 127 of file ntlsa.h.

#define ACCOUNT_READ   (STANDARD_RIGHTS_READ | ACCOUNT_VIEW)

Definition at line 122 of file ntlsa.h.

#define ACCOUNT_VIEW   0x00000001

Definition at line 113 of file ntlsa.h.

#define ACCOUNT_WRITE
Value:
(STANDARD_RIGHTS_WRITE | \
ACCOUNT_ADJUST_PRIVILEGES | \
ACCOUNT_ADJUST_QUOTAS | \
ACCOUNT_ADJUST_SYSTEM_ACCESS)

Definition at line 123 of file ntlsa.h.

#define LSA_GLOBAL_SECRET_PREFIX   L"G$"

Definition at line 281 of file ntlsa.h.

#define LSA_GLOBAL_SECRET_PREFIX_LENGTH   2

Definition at line 282 of file ntlsa.h.

#define LSA_LOCAL_SECRET_PREFIX   L"L$"

Definition at line 284 of file ntlsa.h.

#define LSA_LOCAL_SECRET_PREFIX_LENGTH   2

Definition at line 285 of file ntlsa.h.

#define LSA_LOOKUP_ISOLATED_AS_LOCAL   0x80000000

Definition at line 109 of file ntlsa.h.

#define LSA_MACHINE_SECRET_PREFIX   L"M$"

Definition at line 287 of file ntlsa.h.

#define LSA_MACHINE_SECRET_PREFIX_LENGTH   ((sizeof(LSA_MACHINE_SECRET_PREFIX) - sizeof(WCHAR)) / sizeof(WCHAR))

Definition at line 288 of file ntlsa.h.

#define LSA_SECRET_MAXIMUM_COUNT   0x00001000L

Definition at line 291 of file ntlsa.h.

#define LSA_SECRET_MAXIMUM_LENGTH   0x00000200L

Definition at line 292 of file ntlsa.h.

#define POLICY_MODE_ALL
Value:
( \
POLICY_MODE_INTERACTIVE | \
POLICY_MODE_NETWORK | \
POLICY_MODE_BATCH | \
POLICY_MODE_SERVICE | \
POLICY_MODE_PROXY | \
POLICY_MODE_DENY_INTERACTIVE | \
POLICY_MODE_DENY_NETWORK | \
SECURITY_ACCESS_DENY_BATCH_LOGON | \
SECURITY_ACCESS_DENY_SERVICE_LOGON | \
POLICY_MODE_REMOTE_INTERACTIVE | \
POLICY_MODE_DENY_REMOTE_INTERACTIVE \
)

Definition at line 64 of file ntlsa.h.

#define POLICY_MODE_BATCH   SECURITY_ACCESS_BATCH_LOGON

Definition at line 54 of file ntlsa.h.

#define POLICY_MODE_DENY_BATCH   SECURITY_ACCESS_DENY_BATCH_LOGON

Definition at line 59 of file ntlsa.h.

#define POLICY_MODE_DENY_INTERACTIVE   SECURITY_ACCESS_DENY_INTERACTIVE_LOGON

Definition at line 57 of file ntlsa.h.

#define POLICY_MODE_DENY_NETWORK   SECURITY_ACCESS_DENY_NETWORK_LOGON

Definition at line 58 of file ntlsa.h.

#define POLICY_MODE_DENY_REMOTE_INTERACTIVE   SECURITY_ACCESS_DENY_REMOTE_INTERACTIVE_LOGON

Definition at line 62 of file ntlsa.h.

#define POLICY_MODE_DENY_SERVICE   SECURITY_ACCESS_DENY_SERVICE_LOGON

Definition at line 60 of file ntlsa.h.

#define POLICY_MODE_INTERACTIVE   SECURITY_ACCESS_INTERACTIVE_LOGON

Definition at line 52 of file ntlsa.h.

#define POLICY_MODE_NETWORK   SECURITY_ACCESS_NETWORK_LOGON

Definition at line 53 of file ntlsa.h.

#define POLICY_MODE_PROXY   SECURITY_ACCESS_PROXY_LOGON

Definition at line 56 of file ntlsa.h.

#define POLICY_MODE_REMOTE_INTERACTIVE   SECURITY_ACCESS_REMOTE_INTERACTIVE_LOGON

Definition at line 61 of file ntlsa.h.

#define POLICY_MODE_SERVICE   SECURITY_ACCESS_SERVICE_LOGON

Definition at line 55 of file ntlsa.h.

#define SECRET_ALL_ACCESS
Value:
(STANDARD_RIGHTS_REQUIRED | \
SECRET_SET_VALUE | \
SECRET_QUERY_VALUE)

Definition at line 272 of file ntlsa.h.

#define SECRET_EXECUTE   (STANDARD_RIGHTS_EXECUTE)

Definition at line 279 of file ntlsa.h.

#define SECRET_QUERY_VALUE   0x00000002

Definition at line 271 of file ntlsa.h.

#define SECRET_READ
Value:
(STANDARD_RIGHTS_READ | \
SECRET_QUERY_VALUE)

Definition at line 275 of file ntlsa.h.

#define SECRET_SET_VALUE   0x00000001

Definition at line 270 of file ntlsa.h.

#define SECRET_WRITE
Value:
(STANDARD_RIGHTS_WRITE | \
SECRET_SET_VALUE)

Definition at line 277 of file ntlsa.h.

#define SECURITY_ACCESS_BATCH_LOGON   ((ULONG)0x00000004L)

Definition at line 38 of file ntlsa.h.

#define SECURITY_ACCESS_DENY_BATCH_LOGON   ((ULONG)0x00000100L)

Definition at line 43 of file ntlsa.h.

#define SECURITY_ACCESS_DENY_INTERACTIVE_LOGON   ((ULONG)0x00000040L)

Definition at line 41 of file ntlsa.h.

#define SECURITY_ACCESS_DENY_NETWORK_LOGON   ((ULONG)0x00000080L)

Definition at line 42 of file ntlsa.h.

#define SECURITY_ACCESS_DENY_REMOTE_INTERACTIVE_LOGON   ((ULONG)0x00000800L)

Definition at line 46 of file ntlsa.h.

#define SECURITY_ACCESS_DENY_SERVICE_LOGON   ((ULONG)0x00000200L)

Definition at line 44 of file ntlsa.h.

#define SECURITY_ACCESS_INTERACTIVE_LOGON   ((ULONG)0x00000001L)

Definition at line 36 of file ntlsa.h.

#define SECURITY_ACCESS_NETWORK_LOGON   ((ULONG)0x00000002L)

Definition at line 37 of file ntlsa.h.

#define SECURITY_ACCESS_PROXY_LOGON   ((ULONG)0x00000020L)

Definition at line 40 of file ntlsa.h.

#define SECURITY_ACCESS_REMOTE_INTERACTIVE_LOGON   ((ULONG)0x00000400L)

Definition at line 45 of file ntlsa.h.

#define SECURITY_ACCESS_SERVICE_LOGON   ((ULONG)0x00000010L)

Definition at line 39 of file ntlsa.h.

#define TRUSTED_ALL_ACCESS
Value:
(STANDARD_RIGHTS_REQUIRED | \
TRUSTED_QUERY_DOMAIN_NAME | \
TRUSTED_QUERY_CONTROLLERS | \
TRUSTED_SET_CONTROLLERS | \
TRUSTED_QUERY_POSIX | \
TRUSTED_SET_POSIX | \
TRUSTED_SET_AUTH | \
TRUSTED_QUERY_AUTH)

Definition at line 216 of file ntlsa.h.

#define TRUSTED_EXECUTE
Value:
(STANDARD_RIGHTS_EXECUTE | \
TRUSTED_QUERY_CONTROLLERS | \
TRUSTED_QUERY_POSIX)

Definition at line 230 of file ntlsa.h.

#define TRUSTED_QUERY_AUTH   0x00000040

Definition at line 215 of file ntlsa.h.

#define TRUSTED_QUERY_CONTROLLERS   0x00000002

Definition at line 210 of file ntlsa.h.

#define TRUSTED_QUERY_DOMAIN_NAME   0x00000001

Definition at line 209 of file ntlsa.h.

#define TRUSTED_QUERY_POSIX   0x00000008

Definition at line 212 of file ntlsa.h.

#define TRUSTED_READ
Value:
(STANDARD_RIGHTS_READ | \
TRUSTED_QUERY_DOMAIN_NAME)

Definition at line 224 of file ntlsa.h.

#define TRUSTED_SET_AUTH   0x00000020

Definition at line 214 of file ntlsa.h.

#define TRUSTED_SET_CONTROLLERS   0x00000004

Definition at line 211 of file ntlsa.h.

#define TRUSTED_SET_POSIX   0x00000010

Definition at line 213 of file ntlsa.h.

#define TRUSTED_WRITE
Value:
(STANDARD_RIGHTS_WRITE | \
TRUSTED_SET_CONTROLLERS | \
TRUSTED_SET_POSIX | \
TRUSTED_SET_AUTH)

Definition at line 226 of file ntlsa.h.

Typedef Documentation

typedef struct _POLICY_PRIVILEGE_DEFINITION POLICY_PRIVILEGE_DEFINITION
typedef ULONG POLICY_SYSTEM_ACCESS_MODE

Definition at line 50 of file ntlsa.h.

typedef struct _POLICY_PRIVILEGE_DEFINITION * PPOLICY_PRIVILEGE_DEFINITION
typedef ULONG * PPOLICY_SYSTEM_ACCESS_MODE

Definition at line 50 of file ntlsa.h.

Function Documentation

NTSTATUS NTAPI LsaAddPrivilegesToAccount ( _In_ LSA_HANDLE  AccountHandle,
_In_ PPRIVILEGE_SET  Privileges 
)
NTSTATUS NTAPI LsaChangePassword ( _In_ PLSA_UNICODE_STRING  ServerName,
_In_ PLSA_UNICODE_STRING  DomainName,
_In_ PLSA_UNICODE_STRING  AccountName,
_In_ PLSA_UNICODE_STRING  OldPassword,
_In_ PLSA_UNICODE_STRING  NewPassword 
)
NTSTATUS NTAPI LsaClearAuditLog ( _In_ LSA_HANDLE  PolicyHandle)
NTSTATUS NTAPI LsaCreateAccount ( _In_ LSA_HANDLE  PolicyHandle,
_In_ PSID  AccountSid,
_In_ ACCESS_MASK  DesiredAccess,
_Out_ PLSA_HANDLE  AccountHandle 
)
NTSTATUS NTAPI LsaCreateSecret ( _In_ LSA_HANDLE  PolicyHandle,
_In_ PLSA_UNICODE_STRING  SecretName,
_In_ ACCESS_MASK  DesiredAccess,
_Out_ PLSA_HANDLE  SecretHandle 
)
NTSTATUS NTAPI LsaCreateTrustedDomain ( _In_ LSA_HANDLE  PolicyHandle,
_In_ PLSA_TRUST_INFORMATION  TrustedDomainInformation,
_In_ ACCESS_MASK  DesiredAccess,
_Out_ PLSA_HANDLE  TrustedDomainHandle 
)
NTSTATUS NTAPI LsaDelete ( _In_ LSA_HANDLE  ObjectHandle)
NTSTATUS NTAPI LsaEnumerateAccounts ( _In_ LSA_HANDLE  PolicyHandle,
_Inout_ PLSA_ENUMERATION_HANDLE  EnumerationContext,
_Out_ PVOID *  Buffer,
_In_ ULONG  PreferedMaximumLength,
_Out_ PULONG  CountReturned 
)
NTSTATUS NTAPI LsaEnumeratePrivileges ( _In_ LSA_HANDLE  PolicyHandle,
_Inout_ PLSA_ENUMERATION_HANDLE  EnumerationContext,
_Out_ PVOID *  Buffer,
_In_ ULONG  PreferedMaximumLength,
_Out_ PULONG  CountReturned 
)
NTSTATUS NTAPI LsaEnumeratePrivilegesOfAccount ( _In_ LSA_HANDLE  AccountHandle,
_Out_ PPRIVILEGE_SET *  Privileges 
)
NTSTATUS NTAPI LsaGetQuotasForAccount ( _In_ LSA_HANDLE  AccountHandle,
_Out_ PQUOTA_LIMITS  QuotaLimits 
)
NTSTATUS NTAPI LsaGetRemoteUserName ( _In_opt_ PLSA_UNICODE_STRING  SystemName,
_Outptr_ PLSA_UNICODE_STRING *  UserName,
_Outptr_opt_ PLSA_UNICODE_STRING *  DomainName 
)
NTSTATUS NTAPI LsaGetSystemAccessAccount ( _In_ LSA_HANDLE  AccountHandle,
_Out_ PULONG  SystemAccess 
)
NTSTATUS NTAPI LsaGetUserName ( _Outptr_ PLSA_UNICODE_STRING *  UserName,
_Outptr_opt_ PLSA_UNICODE_STRING *  DomainName 
)
NTSTATUS NTAPI LsaLookupPrivilegeDisplayName ( _In_ LSA_HANDLE  PolicyHandle,
_In_ PLSA_UNICODE_STRING  Name,
_Out_ PLSA_UNICODE_STRING *  DisplayName,
_Out_ PSHORT  LanguageReturned 
)
NTSTATUS NTAPI LsaLookupPrivilegeName ( _In_ LSA_HANDLE  PolicyHandle,
_In_ PLUID  Value,
_Out_ PLSA_UNICODE_STRING *  Name 
)
NTSTATUS NTAPI LsaLookupPrivilegeValue ( _In_ LSA_HANDLE  PolicyHandle,
_In_ PLSA_UNICODE_STRING  Name,
_Out_ PLUID  Value 
)
NTSTATUS NTAPI LsaOpenAccount ( _In_ LSA_HANDLE  PolicyHandle,
_In_ PSID  AccountSid,
_In_ ACCESS_MASK  DesiredAccess,
_Out_ PLSA_HANDLE  AccountHandle 
)
NTSTATUS NTAPI LsaOpenPolicySce ( _In_opt_ PLSA_UNICODE_STRING  SystemName,
_In_ PLSA_OBJECT_ATTRIBUTES  ObjectAttributes,
_In_ ACCESS_MASK  DesiredAccess,
_Out_ PLSA_HANDLE  PolicyHandle 
)
NTSTATUS NTAPI LsaOpenSecret ( _In_ LSA_HANDLE  PolicyHandle,
_In_ PLSA_UNICODE_STRING  SecretName,
_In_ ACCESS_MASK  DesiredAccess,
_Out_ PLSA_HANDLE  SecretHandle 
)
NTSTATUS NTAPI LsaOpenTrustedDomain ( _In_ LSA_HANDLE  PolicyHandle,
_In_ PSID  TrustedDomainSid,
_In_ ACCESS_MASK  DesiredAccess,
_Out_ PLSA_HANDLE  TrustedDomainHandle 
)
NTSTATUS NTAPI LsaQueryInfoTrustedDomain ( _In_ LSA_HANDLE  TrustedDomainHandle,
_In_ TRUSTED_INFORMATION_CLASS  InformationClass,
_Out_ PVOID *  Buffer 
)
NTSTATUS NTAPI LsaQuerySecret ( _In_ LSA_HANDLE  SecretHandle,
_Out_opt_ PLSA_UNICODE_STRING *  CurrentValue,
_Out_opt_ PLARGE_INTEGER  CurrentValueSetTime,
_Out_opt_ PLSA_UNICODE_STRING *  OldValue,
_Out_opt_ PLARGE_INTEGER  OldValueSetTime 
)
NTSTATUS NTAPI LsaQuerySecurityObject ( _In_ LSA_HANDLE  ObjectHandle,
_In_ SECURITY_INFORMATION  SecurityInformation,
_Out_ PSECURITY_DESCRIPTOR *  SecurityDescriptor 
)
NTSTATUS NTAPI LsaRemovePrivilegesFromAccount ( _In_ LSA_HANDLE  AccountHandle,
_In_ BOOLEAN  AllPrivileges,
_In_opt_ PPRIVILEGE_SET  Privileges 
)
NTSTATUS NTAPI LsaSetInformationTrustedDomain ( _In_ LSA_HANDLE  TrustedDomainHandle,
_In_ TRUSTED_INFORMATION_CLASS  InformationClass,
_In_ PVOID  Buffer 
)
NTSTATUS NTAPI LsaSetQuotasForAccount ( _In_ LSA_HANDLE  AccountHandle,
_In_ PQUOTA_LIMITS  QuotaLimits 
)
NTSTATUS NTAPI LsaSetSecret ( _In_ LSA_HANDLE  SecretHandle,
_In_opt_ PLSA_UNICODE_STRING  CurrentValue,
_In_opt_ PLSA_UNICODE_STRING  OldValue 
)
NTSTATUS NTAPI LsaSetSecurityObject ( _In_ LSA_HANDLE  ObjectHandle,
_In_ SECURITY_INFORMATION  SecurityInformation,
_In_ PSECURITY_DESCRIPTOR  SecurityDescriptor 
)
NTSTATUS NTAPI LsaSetSystemAccessAccount ( _In_ LSA_HANDLE  AccountHandle,
_In_ ULONG  SystemAccess 
)