Security Management Structures

  • Article

This section contains reference pages for the following groups of structures:

LSA Policy Management Structures

The following structures are used by the Local Security Authority (LSA) policy management functions.

Structure Description
LSA_AUTH_INFORMATION Contains authentication information for a trusted domain.
LSA_ENUMERATION_INFORMATION Contains a pointer to a security identifier (SID).
LSA_OBJECT_ATTRIBUTES Specifies the attributes of a connection to the Policy object.
LSA_REFERENCED_DOMAIN_LIST Contains information about the domains referenced in a lookup operation.
LSA_TRANSLATED_NAME Contains information about the account identified by a SID.
LSA_TRANSLATED_SID Contains information about the SID that identifies an account.
LSA_TRANSLATED_SID2 Contains information about the SID that identifies an account.
LSA_TRUST_INFORMATION Identifies a domain.
LSA_UNICODE_STRING Contains a string and its length information.
POLICY_ACCOUNT_DOMAIN_INFO Used to set and query the name and SID of the system's account domain.
POLICY_AUDIT_EVENTS_INFO Used to set and query the system's auditing rules.
POLICY_DNS_DOMAIN_INFO Used to set and query Domain Name System (DNS) information about the primary domain associated with a Policy object.
POLICY_LSA_SERVER_ROLE_INFO Used to set and query the role of an LSA server.
POLICY_MODIFICATION_INFO Used to query information about the creation time and last modification of the LSA database.
POLICY_PD_ACCOUNT_INFO Obsolete. Workstations use the workstation name followed by a $ as the account name.
POLICY_PRIMARY_DOMAIN_INFO Obsolete. Use PolicyDnsDomainInformation and the POLICY_DNS_DOMAIN_INFO structure instead.
TRUSTED_DOMAIN_AUTH_INFORMATION Used to retrieve authentication information for a trusted domain.
TRUSTED_DOMAIN_FULL_INFORMATION Used to retrieve complete information about a trusted domain.
TRUSTED_DOMAIN_INFORMATION_BASIC Information about a trusted domain. This structure is identical to LSA_TRUST_INFORMATION.
TRUSTED_DOMAIN_INFORMATION_EX Used to retrieve extended information about a trusted domain.
TRUSTED_DOMAIN_NAME_INFO Used to query or set the name of a trusted domain.
TRUSTED_PASSWORD_INFO Used to query or set the password for a trusted domain.
TRUSTED_POSIX_OFFSET_INFO Used to query or set the value used to generate Posix user and group identifiers.

 

The following structure types are obsolete or are reserved for future use:

  • POLICY_AUDIT_FULL_QUERY_INFO
  • POLICY_AUDIT_FULL_SET_INFO
  • POLICY_AUDIT_LOG_INFO
  • POLICY_DEFAULT_QUOTA_INFO
  • POLICY_REPLICA_SOURCE_INFO
  • TRUSTED_CONTROLLERS_INFO

Attachment Structures

The following structures are used by the Security Configuration attachment DLLs and their supporting functions. These structures are defined in Scesvc.h.

Structure Description
SCESVC_CONFIGURATION_INFO Contains configuration information for a service.
SCESVC_CONFIGURATION_LINE Contains information about a line of configuration data.
SCESVC_ANALYSIS_INFO Contains the analysis information.
SCESVC_ANALYSIS_LINE Contains the key, value, and value length for a specific line specified by an SCESVC_ANALYSIS_INFO structure.
SCESVC_CALLBACK_INFO Contains an opaque database handle and callback function pointers to query, set, and free information.

 

Safer Structures

The following structures and enumerated type are used in Safer. They are defined in WinSafer.h.

Structure Description
SAFER_CODE_PROPERTIES Contains code image information and criteria to be checked on the code image. An array of these structures is passed to the SaferIdentifyLevel function.
SAFER_IDENTIFICATION_HEADER Header structure for SAFER_PATHNAME_IDENTIFICATION, SAFER_HASH_IDENTIFICATION, and SAFER_URLZONE_IDENTIFICATION structures.
SAFER_PATHNAME_IDENTIFICATION Holds the path name of a code image to be checked.
SAFER_HASH_IDENTIFICATION Identifies a hash of the code image to be checked.
SAFER_URLZONE_IDENTIFICATION Identifies the URL zone of origin of the code image to be checked.