Difference between revisions of "Unit Security"

From Ultibo.org
Jump to: navigation, search
 
(8 intermediate revisions by the same user not shown)
Line 4: Line 4:
 
=== Description ===
 
=== Description ===
 
----
 
----
 +
 +
'''Ultibo Security Interface unit'''
  
 
This unit implements the security support for Ultibo.
 
This unit implements the security support for Ultibo.
Line 10: Line 12:
 
----
 
----
  
−
''To be documented''
+
 
 +
<div class="toccolours mw-collapsible mw-collapsed" style="border: 1; font-family: arial; padding-top: 20px; padding-bottom: 15px;">
 +
<div style="font-size: 14px; padding-left: 12px;">'''Security specific constants''' <code> ANYSIZE_* </code></div>
 +
<div class="mw-collapsible-content" style="text-align: left; padding-left: 5px;">
 +
{| class="wikitable" style="font-size: 14px; background: white;"
 +
|-
 +
| <code>ANYSIZE_ARRAY = 1;</code>
 +
| style="width: 50%;"|&nbsp;
 +
|-
 +
|}
 +
</div></div>
 +
<br />
 +
<div class="toccolours mw-collapsible mw-collapsed" style="border: 1; font-family: arial; padding-top: 20px; padding-bottom: 15px;">
 +
<div style="font-size: 14px; padding-left: 12px;">'''SID''' <code> SID_* </code></div>
 +
<div class="mw-collapsible-content" style="text-align: left; padding-left: 5px;">
 +
{| class="wikitable" style="font-size: 14px; background: white;"
 +
|-
 +
| <code>SID_REVISION = 1;</code>
 +
| Current revision level
 +
|-
 +
| <code>SID_MAX_SUB_AUTHORITIES = 15;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SID_RECOMMENDED_SUB_AUTHORITIES = 1;</code>
 +
| Will change to around 6 in a future release
 +
|-
 +
|colspan="2"|&nbsp;
 +
|-
 +
| <code>SECURITY_MIN_SID_SIZE = SizeOf(SID) - SizeOf(DWORD);</code>
 +
| Account for SubAuthority[0]
 +
|-
 +
| <code>SECURITY_MAX_SID_SIZE = SizeOf(SID) - SizeOf(DWORD) + (SID_MAX_SUB_AUTHORITIES * SizeOf(DWORD));</code>
 +
| Account for SubAuthority[0]
 +
|-
 +
|colspan="2"|&nbsp;
 +
|-
 +
| <code>SidTypeUser = 1;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SidTypeGroup = 2;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SidTypeDomain = 3;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SidTypeAlias = 4;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SidTypeWellKnownGroup = 5;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SidTypeDeletedAccount = 6;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SidTypeInvalid = 7;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SidTypeUnknown = 8;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SidTypeComputer = 9;</code>
 +
| &nbsp;
 +
|-
 +
|}
 +
</div></div>
 +
<br />
 +
<div class="toccolours mw-collapsible mw-collapsed" style="border: 1; font-family: arial; padding-top: 20px; padding-bottom: 15px;">
 +
<div style="font-size: 14px; padding-left: 12px;">'''ACL''' <code> ACL_* </code></div>
 +
<div class="mw-collapsible-content" style="text-align: left; padding-left: 5px;">
 +
{| class="wikitable" style="font-size: 14px; background: white;"
 +
|-
 +
| <code>ACL_REVISION = 2;</code>
 +
| style="width: 50%;"|&nbsp;
 +
|-
 +
| <code>ACL_REVISION_DS = 4;</code>
 +
| &nbsp;
 +
|-
 +
|colspan="2"|&nbsp;
 +
|-
 +
| <code>ACL_REVISION1 = 1;</code>
 +
| &nbsp;
 +
|-
 +
| <code>ACL_REVISION2 = 2;</code>
 +
| &nbsp;
 +
|-
 +
| <code>MIN_ACL_REVISION = ACL_REVISION2;</code>
 +
| &nbsp;
 +
|-
 +
| <code>ACL_REVISION3 = 3;</code>
 +
| &nbsp;
 +
|-
 +
| <code>ACL_REVISION4 = 4;</code>
 +
| &nbsp;
 +
|-
 +
| <code>MAX_ACL_REVISION = ACL_REVISION4;</code>
 +
| &nbsp;
 +
|-
 +
|colspan="2"|&nbsp;
 +
|-
 +
| <code>AclRevisionInformation = 1;</code>
 +
| &nbsp;
 +
|-
 +
| <code>AclSizeInformation = 2;</code>
 +
| &nbsp;
 +
|-
 +
|}
 +
</div></div>
 +
<br />
 +
<div class="toccolours mw-collapsible mw-collapsed" style="border: 1; font-family: arial; padding-top: 20px; padding-bottom: 15px;">
 +
<div style="font-size: 14px; padding-left: 12px;">'''ACE''' <code> ACE_* </code></div>
 +
<div class="mw-collapsible-content" style="text-align: left; padding-left: 5px;">
 +
{| class="wikitable" style="font-size: 14px; background: white;"
 +
|-
 +
|colspan="2"|The following are the predefined ace types that go into the AceType field of an Ace header
 +
|-
 +
| <code>ACCESS_MIN_MS_ACE_TYPE = $0;</code>
 +
| style="width: 50%;"|&nbsp;
 +
|-
 +
| <code>ACCESS_ALLOWED_ACE_TYPE = $0;</code>
 +
| &nbsp;
 +
|-
 +
| <code>ACCESS_DENIED_ACE_TYPE = $1;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SYSTEM_AUDIT_ACE_TYPE = $2;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SYSTEM_ALARM_ACE_TYPE = $3;</code>
 +
| &nbsp;
 +
|-
 +
| <code>ACCESS_MAX_MS_V2_ACE_TYPE = $3;</code>
 +
| &nbsp;
 +
|-
 +
|colspan="2"|&nbsp;
 +
|-
 +
| <code>ACCESS_ALLOWED_COMPOUND_ACE_TYPE = $4;</code>
 +
| &nbsp;
 +
|-
 +
| <code>ACCESS_MAX_MS_V3_ACE_TYPE = $4;</code>
 +
| &nbsp;
 +
|-
 +
|colspan="2"|&nbsp;
 +
|-
 +
| <code>ACCESS_MIN_MS_OBJECT_ACE_TYPE = $5;</code>
 +
| &nbsp;
 +
|-
 +
| <code>ACCESS_ALLOWED_OBJECT_ACE_TYPE = $5;</code>
 +
| &nbsp;
 +
|-
 +
| <code>ACCESS_DENIED_OBJECT_ACE_TYPE = $6;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SYSTEM_AUDIT_OBJECT_ACE_TYPE = $7;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SYSTEM_ALARM_OBJECT_ACE_TYPE = $8;</code>
 +
| &nbsp;
 +
|-
 +
| <code>ACCESS_MAX_MS_OBJECT_ACE_TYPE = $8;</code>
 +
| &nbsp;
 +
|-
 +
|colspan="2"|&nbsp;
 +
|-
 +
| <code>ACCESS_MAX_MS_V4_ACE_TYPE = $8;</code>
 +
| &nbsp;
 +
|-
 +
| <code>ACCESS_MAX_MS_ACE_TYPE = $8;</code>
 +
| &nbsp;
 +
|-
 +
|colspan="2"|&nbsp;
 +
|-
 +
| <code>ACCESS_ALLOWED_CALLBACK_ACE_TYPE = $9;</code>
 +
| &nbsp;
 +
|-
 +
| <code>ACCESS_DENIED_CALLBACK_ACE_TYPE = $A;</code>
 +
| &nbsp;
 +
|-
 +
| <code>ACCESS_ALLOWED_CALLBACK_OBJECT_ACE_TYPE = $B;</code>
 +
| &nbsp;
 +
|-
 +
| <code>ACCESS_DENIED_CALLBACK_OBJECT_ACE_TYPE = $C;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SYSTEM_AUDIT_CALLBACK_ACE_TYPE = $D;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SYSTEM_ALARM_CALLBACK_ACE_TYPE = $E;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SYSTEM_AUDIT_CALLBACK_OBJECT_ACE_TYPE = $F;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SYSTEM_ALARM_CALLBACK_OBJECT_ACE_TYPE = $10;</code>
 +
| &nbsp;
 +
|-
 +
|colspan="2"|&nbsp;
 +
|-
 +
| <code>ACCESS_MAX_MS_V5_ACE_TYPE = $10;</code>
 +
| &nbsp;
 +
|-
 +
|colspan="2"|&nbsp;
 +
|-
 +
|colspan="2"|The following are the inherit flags that go into the AceFlags field of an Ace header
 +
|-
 +
| <code>OBJECT_INHERIT_ACE = $1;</code>
 +
| &nbsp;
 +
|-
 +
| <code>CONTAINER_INHERIT_ACE = $2;</code>
 +
| &nbsp;
 +
|-
 +
| <code>NO_PROPAGATE_INHERIT_ACE = $4;</code>
 +
| &nbsp;
 +
|-
 +
| <code>INHERIT_ONLY_ACE = $8;</code>
 +
| &nbsp;
 +
|-
 +
| <code>INHERITED_ACE = $10;</code>
 +
| &nbsp;
 +
|-
 +
| <code>VALID_INHERIT_FLAGS = $1F;</code>
 +
| &nbsp;
 +
|-
 +
|colspan="2"|&nbsp;
 +
|-
 +
|colspan="2"|The following are the currently defined ACE flags that go into the AceFlags field of an ACE header. Each ACE type has its own set of AceFlags.
 +
|-
 +
|colspan="2"|SYSTEM_AUDIT and SYSTEM_ALARM AceFlags
 +
|-
 +
| <code>SUCCESSFUL_ACCESS_ACE_FLAG = $40;</code>
 +
| &nbsp;
 +
|-
 +
| <code>FAILED_ACCESS_ACE_FLAG = $80;</code>
 +
| &nbsp;
 +
|-
 +
|colspan="2"|&nbsp;
 +
|-
 +
|colspan="2"|Currently defined Flags for "OBJECT" ACE types
 +
|-
 +
| <code>ACE_OBJECT_TYPE_PRESENT = $1;</code>
 +
| &nbsp;
 +
|-
 +
| <code>ACE_INHERITED_OBJECT_TYPE_PRESENT = $2;</code>
 +
| &nbsp;
 +
|-
 +
|}
 +
</div></div>
 +
<br />
 +
<div class="toccolours mw-collapsible mw-collapsed" style="border: 1; font-family: arial; padding-top: 20px; padding-bottom: 15px;">
 +
<div style="font-size: 14px; padding-left: 12px;">'''Security descriptor''' <code> SECURITY_DESCRIPTOR_* </code></div>
 +
<div class="mw-collapsible-content" style="text-align: left; padding-left: 5px;">
 +
{| class="wikitable" style="font-size: 14px; background: white;"
 +
|-
 +
| <code>SECURITY_DESCRIPTOR_REVISION = 1;</code>
 +
| Current security descriptor revision value
 +
|-
 +
| <code>SECURITY_DESCRIPTOR_REVISION1 = 1;</code>
 +
| &nbsp;
 +
|-
 +
|colspan="2"|&nbsp;
 +
|-
 +
| <code>SE_OWNER_DEFAULTED = $0001;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SE_GROUP_DEFAULTED = $0002;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SE_DACL_PRESENT = $0004;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SE_DACL_DEFAULTED = $0008;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SE_SACL_PRESENT = $0010;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SE_SACL_DEFAULTED = $0020;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SE_DACL_AUTO_INHERIT_REQ = $0100;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SE_SACL_AUTO_INHERIT_REQ = $0200;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SE_DACL_AUTO_INHERITED = $0400;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SE_SACL_AUTO_INHERITED = $0800;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SE_DACL_PROTECTED = $1000;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SE_SACL_PROTECTED = $2000;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SE_RM_CONTROL_VALID = $4000;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SE_SELF_RELATIVE = $8000;</code>
 +
| &nbsp;
 +
|-
 +
|}
 +
</div></div>
 +
<br />
 +
<div class="toccolours mw-collapsible mw-collapsed" style="border: 1; font-family: arial; padding-top: 20px; padding-bottom: 15px;">
 +
<div style="font-size: 14px; padding-left: 12px;">'''Universal well-known SIDs''' <code> SECURITY_NULL_SID_* </code></div>
 +
<div class="mw-collapsible-content" style="text-align: left; padding-left: 5px;">
 +
{| class="wikitable" style="font-size: 14px; background: white;"
 +
|-
 +
| <code>SECURITY_NULL_SID_IDENTIFIER = 0;</code>
 +
| style="width: 50%;"|&nbsp;
 +
|-
 +
| <code>SECURITY_WORLD_SID_IDENTIFIER = 1;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SECURITY_LOCAL_SID_IDENTIFIER = 2;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SECURITY_CREATOR_SID_IDENTIFIER = 3;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SECURITY_NON_UNIQUE_IDENTIFIER = 4;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SECURITY_RESOURCE_MANAGER_IDENTIFIER = 9;</code>
 +
| &nbsp;
 +
|-
 +
|colspan="2"|&nbsp;
 +
|-
 +
| <code>SECURITY_NULL_SID_AUTHORITY: TSIDIdentifierAuthority = (Value: (0, 0, 0, 0, 0, 0));</code>
 +
| &nbsp;
 +
|-
 +
| <code>SECURITY_WORLD_SID_AUTHORITY: TSIDIdentifierAuthority = (Value: (0, 0, 0, 0, 0, 1));</code>
 +
| &nbsp;
 +
|-
 +
| <code>SECURITY_LOCAL_SID_AUTHORITY: TSIDIdentifierAuthority = (Value: (0, 0, 0, 0, 0, 2));</code>
 +
| &nbsp;
 +
|-
 +
| <code>SECURITY_CREATOR_SID_AUTHORITY: TSIDIdentifierAuthority = (Value: (0, 0, 0, 0, 0, 3));</code>
 +
| &nbsp;
 +
|-
 +
| <code>SECURITY_NON_UNIQUE_AUTHORITY: TSIDIdentifierAuthority = (Value: (0, 0, 0, 0, 0, 4));</code>
 +
| &nbsp;
 +
|-
 +
| <code>SECURITY_RESOURCE_MANAGER_AUTHORITY: TSIDIdentifierAuthority = (Value: (0, 0, 0, 0, 0, 9));</code>
 +
| &nbsp;
 +
|-
 +
|colspan="2"|&nbsp;
 +
|-
 +
| <code>SECURITY_NULL_RID = $00000000;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SECURITY_WORLD_RID = $00000000;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SECURITY_LOCAL_RID = $00000000;</code>
 +
| &nbsp;
 +
|-
 +
|colspan="2"|&nbsp;
 +
|-
 +
| <code>SECURITY_CREATOR_OWNER_RID = $00000000;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SECURITY_CREATOR_GROUP_RID = $00000001;</code>
 +
| &nbsp;
 +
|-
 +
|colspan="2"|&nbsp;
 +
|-
 +
| <code>SECURITY_CREATOR_OWNER_SERVER_RID = $00000002;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SECURITY_CREATOR_GROUP_SERVER_RID = $00000003;</code>
 +
| &nbsp;
 +
|-
 +
|}
 +
</div></div>
 +
<br />
 +
<div class="toccolours mw-collapsible mw-collapsed" style="border: 1; font-family: arial; padding-top: 20px; padding-bottom: 15px;">
 +
<div style="font-size: 14px; padding-left: 12px;">'''NT well-known SIDs''' <code> SECURITY_NT_IDENTIFIER* </code></div>
 +
<div class="mw-collapsible-content" style="text-align: left; padding-left: 5px;">
 +
{| class="wikitable" style="font-size: 14px; background: white;"
 +
|-
 +
| <code>SECURITY_NT_IDENTIFIER = 5;</code>
 +
| style="width: 50%;"|&nbsp;
 +
|-
 +
|colspan="2"|&nbsp;
 +
|-
 +
| <code>SECURITY_NT_AUTHORITY: TSIDIdentifierAuthority = (Value: (0, 0, 0, 0, 0, 5));</code>
 +
| &nbsp;
 +
|-
 +
|colspan="2"|&nbsp;
 +
|-
 +
| <code>SECURITY_DIALUP_RID = $00000001;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SECURITY_NETWORK_RID = $00000002;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SECURITY_BATCH_RID = $00000003;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SECURITY_INTERACTIVE_RID = $00000004;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SECURITY_SERVICE_RID = $00000006;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SECURITY_ANONYMOUS_LOGON_RID = $00000007;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SECURITY_PROXY_RID = $00000008;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SECURITY_ENTERPRISE_CONTROLLERS_RID = $00000009;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SECURITY_SERVER_LOGON_RID = SECURITY_ENTERPRISE_CONTROLLERS_RID;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SECURITY_PRINCIPAL_SELF_RID = $0000000A;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SECURITY_AUTHENTICATED_USER_RID = $0000000B;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SECURITY_RESTRICTED_CODE_RID = $0000000C;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SECURITY_TERMINAL_SERVER_RID = $0000000D;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SECURITY_REMOTE_LOGON_RID = $0000000E;</code>
 +
| &nbsp;
 +
|-
 +
|colspan="2"|&nbsp;
 +
|-
 +
| <code>SECURITY_LOGON_IDS_RID = $00000005;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SECURITY_LOGON_IDS_RID_COUNT = 3;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SECURITY_LOCAL_SYSTEM_RID = $00000012;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SECURITY_LOCAL_SERVICE_RID = $00000013;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SECURITY_NETWORK_SERVICE_RID = $00000014;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SECURITY_NT_NON_UNIQUE = $00000015;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SECURITY_NT_NON_UNIQUE_SUB_AUTH_COUNT = 3;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SECURITY_BUILTIN_DOMAIN_RID = $00000020;</code>
 +
| &nbsp;
 +
|-
 +
|}
 +
</div></div>
 +
<br />
 +
<div class="toccolours mw-collapsible mw-collapsed" style="border: 1; font-family: arial; padding-top: 20px; padding-bottom: 15px;">
 +
<div style="font-size: 14px; padding-left: 12px;">'''Well-known users''' <code> _USER_RID_* </code></div>
 +
<div class="mw-collapsible-content" style="text-align: left; padding-left: 5px;">
 +
{| class="wikitable" style="font-size: 14px; background: white;"
 +
|-
 +
| <code>DOMAIN_USER_RID_ADMIN = $000001F4;</code>
 +
| style="width: 50%;"|&nbsp;
 +
|-
 +
| <code>DOMAIN_USER_RID_GUEST = $000001F5;</code>
 +
| &nbsp;
 +
|-
 +
| <code>DOMAIN_USER_RID_KRBTGT = $000001F6;</code>
 +
| &nbsp;
 +
|-
 +
|}
 +
</div></div>
 +
<br />
 +
<div class="toccolours mw-collapsible mw-collapsed" style="border: 1; font-family: arial; padding-top: 20px; padding-bottom: 15px;">
 +
<div style="font-size: 14px; padding-left: 12px;">'''Well-known groups''' <code> _GROUP_RID_* </code></div>
 +
<div class="mw-collapsible-content" style="text-align: left; padding-left: 5px;">
 +
{| class="wikitable" style="font-size: 14px; background: white;"
 +
|-
 +
| <code>DOMAIN_GROUP_RID_ADMINS = $00000200;</code>
 +
| style="width: 50%;"|&nbsp;
 +
|-
 +
| <code>DOMAIN_GROUP_RID_USERS = $00000201;</code>
 +
| &nbsp;
 +
|-
 +
| <code>DOMAIN_GROUP_RID_GUESTS = $00000202;</code>
 +
| &nbsp;
 +
|-
 +
| <code>DOMAIN_GROUP_RID_COMPUTERS = $00000203;</code>
 +
| &nbsp;
 +
|-
 +
| <code>DOMAIN_GROUP_RID_CONTROLLERS = $00000204;</code>
 +
| &nbsp;
 +
|-
 +
| <code>DOMAIN_GROUP_RID_CERT_ADMINS = $00000205;</code>
 +
| &nbsp;
 +
|-
 +
| <code>DOMAIN_GROUP_RID_SCHEMA_ADMINS = $00000206;</code>
 +
| &nbsp;
 +
|-
 +
| <code>DOMAIN_GROUP_RID_ENTERPRISE_ADMINS = $00000207;</code>
 +
| &nbsp;
 +
|-
 +
| <code>DOMAIN_GROUP_RID_POLICY_ADMINS = $00000208;</code>
 +
| &nbsp;
 +
|-
 +
|}
 +
</div></div>
 +
<br />
 +
<div class="toccolours mw-collapsible mw-collapsed" style="border: 1; font-family: arial; padding-top: 20px; padding-bottom: 15px;">
 +
<div style="font-size: 14px; padding-left: 12px;">'''Well-known aliases''' <code> _ALIAS_RID_* </code></div>
 +
<div class="mw-collapsible-content" style="text-align: left; padding-left: 5px;">
 +
{| class="wikitable" style="font-size: 14px; background: white;"
 +
|-
 +
| <code>DOMAIN_ALIAS_RID_ADMINS = $00000220;</code>
 +
| style="width: 50%;"|&nbsp;
 +
|-
 +
| <code>DOMAIN_ALIAS_RID_USERS = $00000221;</code>
 +
| &nbsp;
 +
|-
 +
| <code>DOMAIN_ALIAS_RID_GUESTS = $00000222;</code>
 +
| &nbsp;
 +
|-
 +
| <code>DOMAIN_ALIAS_RID_POWER_USERS = $00000223;</code>
 +
| &nbsp;
 +
|-
 +
|colspan="2"|&nbsp;
 +
|-
 +
| <code>DOMAIN_ALIAS_RID_ACCOUNT_OPS = $00000224;</code>
 +
| &nbsp;
 +
|-
 +
| <code>DOMAIN_ALIAS_RID_SYSTEM_OPS = $00000225;</code>
 +
| &nbsp;
 +
|-
 +
| <code>DOMAIN_ALIAS_RID_PRINT_OPS = $00000226;</code>
 +
| &nbsp;
 +
|-
 +
| <code>DOMAIN_ALIAS_RID_BACKUP_OPS = $00000227;</code>
 +
| &nbsp;
 +
|-
 +
|colspan="2"|&nbsp;
 +
|-
 +
| <code>DOMAIN_ALIAS_RID_REPLICATOR = $00000228;</code>
 +
| &nbsp;
 +
|-
 +
| <code>DOMAIN_ALIAS_RID_RAS_SERVERS = $00000229;</code>
 +
| &nbsp;
 +
|-
 +
| <code>DOMAIN_ALIAS_RID_PREW2KCOMPACCESS = $0000022A;</code>
 +
| &nbsp;
 +
|-
 +
| <code>DOMAIN_ALIAS_RID_REMOTE_DESKTOP_USERS = $0000022B;</code>
 +
| &nbsp;
 +
|-
 +
| <code>DOMAIN_ALIAS_RID_NETWORK_CONFIGURATION_OPS = $0000022C;</code>
 +
| &nbsp;
 +
|-
 +
|}
 +
</div></div>
 +
<br />
 +
<div class="toccolours mw-collapsible mw-collapsed" style="border: 1; font-family: arial; padding-top: 20px; padding-bottom: 15px;">
 +
<div style="font-size: 14px; padding-left: 12px;">'''Group attributes''' <code> _GROUP_* </code></div>
 +
<div class="mw-collapsible-content" style="text-align: left; padding-left: 5px;">
 +
{| class="wikitable" style="font-size: 14px; background: white;"
 +
|-
 +
| <code>SE_GROUP_MANDATORY = $00000001;</code>
 +
| style="width: 50%;"|&nbsp;
 +
|-
 +
| <code>SE_GROUP_ENABLED_BY_DEFAULT = $00000002;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SE_GROUP_ENABLED = $00000004;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SE_GROUP_OWNER = $00000008;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SE_GROUP_USE_FOR_DENY_ONLY = $00000010;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SE_GROUP_LOGON_ID = $C0000000;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SE_GROUP_RESOURCE = $20000000;</code>
 +
| &nbsp;
 +
|-
 +
|}
 +
</div></div>
 +
<br />
  
 
=== Type definitions ===
 
=== Type definitions ===
 
----
 
----
  
−
''To be documented''
+
 
 +
'''SID identifier authority'''
 +
 
 +
<div class="toccolours mw-collapsible mw-collapsed" style="border: 1; font-family: arial;">
 +
<code>SID_IDENTIFIER_AUTHORITY = _SID_IDENTIFIER_AUTHORITY;</code>
 +
 
 +
<code>TSidIdentifierAuthority = SID_IDENTIFIER_AUTHORITY;</code>
 +
 
 +
<code>PSidIdentifierAuthority = PSID_IDENTIFIER_AUTHORITY;</code>
 +
 
 +
<code>PSID_IDENTIFIER_AUTHORITY = ^SID_IDENTIFIER_AUTHORITY;</code>
 +
 
 +
<code>_SID_IDENTIFIER_AUTHORITY = record</code>
 +
<div class="mw-collapsible-content" style="text-align: left; padding-left: 5px;">
 +
{| class="wikitable" style="font-size: 14px; background: white;"
 +
|-
 +
| <code>Value: array [0..5] of Byte;</code>
 +
| style="width: 50%;"|&nbsp;
 +
|-
 +
|}
 +
</div></div>
 +
 
 +
'''SID types'''
 +
 
 +
<div class="toccolours mw-collapsible mw-collapsed" style="border: 1; font-family: arial;">
 +
<code>SID = _SID;</code>
 +
 
 +
<code>PPSID = ^PSID;</code>
 +
 
 +
<code>TSid = SID;</code>
 +
 
 +
<code>PSid = ^SID;</code>
 +
 
 +
<code>_SID = record</code>
 +
<div class="mw-collapsible-content" style="text-align: left; padding-left: 5px;">
 +
{| class="wikitable" style="font-size: 14px; background: white;"
 +
|-
 +
| <code>Revision: Byte;</code>
 +
| style="width: 50%;"|&nbsp;
 +
|-
 +
| <code>SubAuthorityCount: Byte;</code>
 +
| &nbsp;
 +
|-
 +
| <code>IdentifierAuthority: SID_IDENTIFIER_AUTHORITY;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SubAuthority: array [0..ANYSIZE_ARRAY - 1] of DWORD;</code>
 +
| &nbsp;
 +
|-
 +
|}
 +
</div></div>
 +
 
 +
'''Signed types'''
 +
 
 +
{| class="wikitable" style="font-size: 14px; text-align: left; width: 100%; height: 50px;"
 +
|-
 +
| <code>BOOL = LongBool;</code>
 +
| style="width: 40%;"|
 +
|-
 +
|}
 +
 
 +
'''Unsigned types'''
 +
 
 +
{| class="wikitable" style="font-size: 14px; text-align: left; width: 100%; height: 50px;"
 +
|-
 +
| <code>UCHAR = Byte;</code>
 +
| style="width: 40%;"|
 +
|-
 +
|}
 +
 
 +
'''Pointer types'''
 +
 
 +
{| class="wikitable" style="font-size: 14px; text-align: left; width: 100%; height: 50px;"
 +
|-
 +
| <code>PUCHAR = ^Byte;</code>
 +
| style="width: 40%;"|
 +
|-
 +
|}
 +
 
 +
'''GUID types'''
 +
 
 +
{| class="wikitable" style="font-size: 14px; text-align: left; width: 100%; height: 50px;"
 +
|-
 +
| <code>GUID = TGUID;</code>
 +
| style="width: 40%;"|
 +
|-
 +
|}
 +
 
 +
'''SID name use'''
 +
 
 +
{| class="wikitable" style="font-size: 14px; text-align: left; width: 100%; height: 50px;"
 +
|-
 +
| <code>_SID_NAME_USE = DWORD;</code>
 +
| style="width: 40%;"|
 +
|-
 +
| <code>SID_NAME_USE = _SID_NAME_USE;</code>
 +
| style="width: 40%;"|
 +
|-
 +
| <code>PSID_NAME_USE = ^SID_NAME_USE;</code>
 +
| style="width: 40%;"|
 +
|-
 +
| <code>TSidNameUse = SID_NAME_USE;</code>
 +
| style="width: 40%;"|
 +
|-
 +
| <code>PSidNameUse = PSID_NAME_USE;</code>
 +
| style="width: 40%;"|
 +
|-
 +
|}
 +
 +
'''SID and attributes'''
 +
 
 +
<div class="toccolours mw-collapsible mw-collapsed" style="border: 1; font-family: arial;">
 +
<code>SID_AND_ATTRIBUTES = _SID_AND_ATTRIBUTES;</code>
 +
 
 +
<code>TSidAndAttributes = SID_AND_ATTRIBUTES;</code>
 +
 
 +
<code>PSidAndAttributes = PSID_AND_ATTRIBUTES;</code>
 +
 
 +
<code>PSID_AND_ATTRIBUTES = ^SID_AND_ATTRIBUTES;</code>
 +
 
 +
<code>_SID_AND_ATTRIBUTES = record</code>
 +
<div class="mw-collapsible-content" style="text-align: left; padding-left: 5px;">
 +
{| class="wikitable" style="font-size: 14px; background: white;"
 +
|-
 +
| <code>Sid: PSID;</code>
 +
| style="width: 50%;"|&nbsp;
 +
|-
 +
| <code>Attributes: DWORD;</code>
 +
| &nbsp;
 +
|-
 +
|}
 +
</div></div> 
 +
 
 +
'''SID and attributes array'''
 +
 
 +
{| class="wikitable" style="font-size: 14px; text-align: left; width: 100%; height: 50px;"
 +
|-
 +
| <code>SID_AND_ATTRIBUTES_ARRAY = array [0..ANYSIZE_ARRAY - 1] of SID_AND_ATTRIBUTES;</code>
 +
| style="width: 40%;"|
 +
|-
 +
| <code>PSID_AND_ATTRIBUTES_ARRAY = ^SID_AND_ATTRIBUTES_ARRAY;</code>
 +
| style="width: 40%;"|
 +
|-
 +
| <code>PSidAndAttributesArray = ^TSidAndAttributesArray;</code>
 +
| style="width: 40%;"|
 +
|-
 +
| <code>TSidAndAttributesArray = SID_AND_ATTRIBUTES_ARRAY;</code>
 +
| style="width: 40%;"|
 +
|-
 +
|}
 +
 +
'''ACL'''
 +
 
 +
<div class="toccolours mw-collapsible mw-collapsed" style="border: 1; font-family: arial;">
 +
<code>ACL = _ACL;</code>
 +
 
 +
<code>TAcl = ACL;</code>
 +
 
 +
<code>PPACL = ^PACL;</code>
 +
 
 +
<code>PACL = ^ACL;</code>
 +
 
 +
<code>_ACL = record</code>
 +
<div class="mw-collapsible-content" style="text-align: left; padding-left: 5px;">
 +
{| class="wikitable" style="font-size: 14px; background: white;"
 +
|-
 +
| <code>AclRevision: Byte;</code>
 +
| style="width: 50%;"|&nbsp;
 +
|-
 +
| <code>Sbz1: Byte;</code>
 +
| &nbsp;
 +
|-
 +
| <code>AclSize: Word;</code>
 +
| &nbsp;
 +
|-
 +
| <code>AceCount: Word;</code>
 +
| &nbsp;
 +
|-
 +
| <code>Sbz2: Word;</code>
 +
| &nbsp;
 +
|-
 +
|}
 +
</div></div>
 +
 
 +
'''ACL information class'''
 +
 
 +
{| class="wikitable" style="font-size: 14px; text-align: left; width: 100%; height: 50px;"
 +
|-
 +
| <code>_ACL_INFORMATION_CLASS = DWORD;</code>
 +
| style="width: 40%;"|
 +
|-
 +
| <code>ACL_INFORMATION_CLASS = _ACL_INFORMATION_CLASS;</code>
 +
| style="width: 40%;"|
 +
|-
 +
| <code>TAclInformationClass = ACL_INFORMATION_CLASS;</code>
 +
| style="width: 40%;"|
 +
|-
 +
|}
 +
 +
'''ACL revision information'''
 +
 
 +
<div class="toccolours mw-collapsible mw-collapsed" style="border: 1; font-family: arial;">
 +
<code>ACL_REVISION_INFORMATION = _ACL_REVISION_INFORMATION;</code>
 +
 
 +
<code>TAclRevisionInformation = ACL_REVISION_INFORMATION;</code>
 +
 
 +
<code>PAclRevisionInformation = PACL_REVISION_INFORMATION;</code>
 +
 
 +
<code>PACL_REVISION_INFORMATION = ^ACL_REVISION_INFORMATION;</code>
 +
 
 +
<code>_ACL_REVISION_INFORMATION = record</code>
 +
<div class="mw-collapsible-content" style="text-align: left; padding-left: 5px;">
 +
{| class="wikitable" style="font-size: 14px; background: white;"
 +
|-
 +
|colspan="2"|Note: This record is returned/sent if the user is requesting/setting the AclRevisionInformation
 +
|-
 +
| <code>AclRevision: DWORD;</code>
 +
| style="width: 50%;"|&nbsp;
 +
|-
 +
|}
 +
</div></div> 
 +
 
 +
'''ACL size information'''
 +
 
 +
<div class="toccolours mw-collapsible mw-collapsed" style="border: 1; font-family: arial;">
 +
<code>ACL_SIZE_INFORMATION = _ACL_SIZE_INFORMATION;</code>
 +
 
 +
<code>TAclSizeInformation = ACL_SIZE_INFORMATION;</code>
 +
 
 +
<code>PAclSizeInformation = PACL_SIZE_INFORMATION;</code>
 +
 
 +
<code>PACL_SIZE_INFORMATION = ^ACL_SIZE_INFORMATION;</code>
 +
 
 +
<code>_ACL_SIZE_INFORMATION = record</code>
 +
<div class="mw-collapsible-content" style="text-align: left; padding-left: 5px;">
 +
{| class="wikitable" style="font-size: 14px; background: white;"
 +
|-
 +
|colspan="2"|Note: This record is returned if the user is requesting AclSizeInformation
 +
|-
 +
| <code>AceCount: DWORD;</code>
 +
| style="width: 50%;"|&nbsp;
 +
|-
 +
| <code>AclBytesInUse: DWORD;</code>
 +
| &nbsp;
 +
|-
 +
| <code>AclBytesFree: DWORD;</code>
 +
| &nbsp;
 +
|-
 +
|}
 +
</div></div> 
 +
 
 +
'''Access mask'''
 +
 
 +
{| class="wikitable" style="font-size: 14px; text-align: left; width: 100%; height: 50px;"
 +
|-
 +
| <code>ACCESS_MASK = DWORD;</code>
 +
| style="width: 40%;"|
 +
|-
 +
| <code>PACCESS_MASK = ^ACCESS_MASK;</code>
 +
| style="width: 40%;"|
 +
|-
 +
| <code>TAccessMask = ACCESS_MASK;</code>
 +
| style="width: 40%;"|
 +
|-
 +
| <code>PAccessMask = PACCESS_MASK;</code>
 +
| style="width: 40%;"|
 +
|-
 +
|}
 +
 
 +
'''ACE header'''
 +
 
 +
<div class="toccolours mw-collapsible mw-collapsed" style="border: 1; font-family: arial;">
 +
<code>ACE_HEADER = _ACE_HEADER;</code>
 +
 
 +
<code>TAceHeader = ACE_HEADER;</code>
 +
 
 +
<code>PAceHeader = PACE_HEADER;</code>
 +
 
 +
<code>PACE_HEADER = ^ACE_HEADER;</code>
 +
 
 +
<code>_ACE_HEADER = record</code>
 +
<div class="mw-collapsible-content" style="text-align: left; padding-left: 5px;">
 +
{| class="wikitable" style="font-size: 14px; background: white;"
 +
|-
 +
| <code>AceType: Byte;</code>
 +
| style="width: 50%;"|&nbsp;
 +
|-
 +
| <code>AceFlags: Byte;</code>
 +
| &nbsp;
 +
|-
 +
| <code>AceSize: Word;</code>
 +
| &nbsp;
 +
|-
 +
|}
 +
</div></div> 
 +
 
 +
'''Access allowed'''
 +
 
 +
<div class="toccolours mw-collapsible mw-collapsed" style="border: 1; font-family: arial;">
 +
<code>ACCESS_ALLOWED_ACE = _ACCESS_ALLOWED_ACE;</code>
 +
 
 +
<code>TAccessAllowedAce = ACCESS_ALLOWED_ACE;</code>
 +
 
 +
<code>PAccessAllowedAce = PACCESS_ALLOWED_ACE;</code>
 +
 
 +
<code>PACCESS_ALLOWED_ACE = ^ACCESS_ALLOWED_ACE;</code>
 +
 
 +
<code>_ACCESS_ALLOWED_ACE = record</code>
 +
<div class="mw-collapsible-content" style="text-align: left; padding-left: 5px;">
 +
{| class="wikitable" style="font-size: 14px; background: white;"
 +
|-
 +
| <code>Header: ACE_HEADER;</code>
 +
| style="width: 50%;"|&nbsp;
 +
|-
 +
| <code>Mask: ACCESS_MASK;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SidStart: DWORD;</code>
 +
| &nbsp;
 +
|-
 +
|}
 +
</div></div> 
 +
 
 +
'''Access denied'''
 +
 
 +
<div class="toccolours mw-collapsible mw-collapsed" style="border: 1; font-family: arial;">
 +
<code>ACCESS_DENIED_ACE = _ACCESS_DENIED_ACE;</code>
 +
 
 +
<code>TAccessDeniedAce = ACCESS_DENIED_ACE;</code>
 +
 
 +
<code>PAccessDeniedAce = PACCESS_DENIED_ACE;</code>
 +
 
 +
<code>PACCESS_DENIED_ACE = ^ACCESS_DENIED_ACE;</code>
 +
 
 +
<code>_ACCESS_DENIED_ACE = record</code>
 +
<div class="mw-collapsible-content" style="text-align: left; padding-left: 5px;">
 +
{| class="wikitable" style="font-size: 14px; background: white;"
 +
|-
 +
| <code>Header: ACE_HEADER;</code>
 +
| style="width: 50%;"|&nbsp;
 +
|-
 +
| <code>Mask: ACCESS_MASK;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SidStart: DWORD;</code>
 +
| &nbsp;
 +
|-
 +
|}
 +
</div></div> 
 +
 
 +
'''System audit'''
 +
 
 +
<div class="toccolours mw-collapsible mw-collapsed" style="border: 1; font-family: arial;">
 +
<code>SYSTEM_AUDIT_ACE = _SYSTEM_AUDIT_ACE;</code>
 +
 
 +
<code>TSystemAuditAce = SYSTEM_AUDIT_ACE;</code>
 +
 
 +
<code>PSystemAuditAce = PSYSTEM_AUDIT_ACE;</code>
 +
 
 +
<code>PSYSTEM_AUDIT_ACE = ^SYSTEM_AUDIT_ACE;</code>
 +
 
 +
<code>_SYSTEM_AUDIT_ACE = record</code>
 +
<div class="mw-collapsible-content" style="text-align: left; padding-left: 5px;">
 +
{| class="wikitable" style="font-size: 14px; background: white;"
 +
|-
 +
| <code>Header: ACE_HEADER;</code>
 +
| style="width: 50%;"|&nbsp;
 +
|-
 +
| <code>Mask: ACCESS_MASK;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SidStart: DWORD;</code>
 +
| &nbsp;
 +
|-
 +
|}
 +
</div></div>
 +
 
 +
'''System alarm''' 
 +
 
 +
<div class="toccolours mw-collapsible mw-collapsed" style="border: 1; font-family: arial;">
 +
<code>SYSTEM_ALARM_ACE = _SYSTEM_ALARM_ACE;</code>
 +
 
 +
<code>TSystemAlarmAce = SYSTEM_ALARM_ACE;</code>
 +
 
 +
<code>PSystemAlarmAce = PSYSTEM_ALARM_ACE;</code>
 +
 
 +
<code>PSYSTEM_ALARM_ACE = ^SYSTEM_ALARM_ACE;</code>
 +
 
 +
<code>_SYSTEM_ALARM_ACE = record</code>
 +
<div class="mw-collapsible-content" style="text-align: left; padding-left: 5px;">
 +
{| class="wikitable" style="font-size: 14px; background: white;"
 +
|-
 +
| <code>Header: ACE_HEADER;</code>
 +
| style="width: 50%;"|&nbsp;
 +
|-
 +
| <code>Mask: ACCESS_MASK;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SidStart: DWORD;</code>
 +
| &nbsp;
 +
|-
 +
|}
 +
</div></div> 
 +
 
 +
'''Access allowed object'''
 +
 
 +
<div class="toccolours mw-collapsible mw-collapsed" style="border: 1; font-family: arial;">
 +
<code>ACCESS_ALLOWED_OBJECT_ACE = _ACCESS_ALLOWED_OBJECT_ACE;</code>
 +
 
 +
<code>TAccessAllowedObjectAce = ACCESS_ALLOWED_OBJECT_ACE;</code>
 +
 
 +
<code>PAccessAllowedObjectAce = PACCESS_ALLOWED_OBJECT_ACE;</code>
 +
 
 +
<code>PACCESS_ALLOWED_OBJECT_ACE = ^ACCESS_ALLOWED_OBJECT_ACE;</code>
 +
 
 +
<code>_ACCESS_ALLOWED_OBJECT_ACE = record</code>
 +
<div class="mw-collapsible-content" style="text-align: left; padding-left: 5px;">
 +
{| class="wikitable" style="font-size: 14px; background: white;"
 +
|-
 +
| <code>Header: ACE_HEADER;</code>
 +
| style="width: 50%;"|&nbsp;
 +
|-
 +
| <code>Mask: ACCESS_MASK;</code>
 +
| &nbsp;
 +
|-
 +
| <code>Flags: DWORD;</code>
 +
| &nbsp;
 +
|-
 +
| <code>ObjectType: GUID;</code>
 +
| &nbsp;
 +
|-
 +
| <code>InheritedObjectType: GUID;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SidStart: DWORD;</code>
 +
| &nbsp;
 +
|-
 +
|}
 +
</div></div> 
 +
 
 +
'''Access denied object'''
 +
 
 +
<div class="toccolours mw-collapsible mw-collapsed" style="border: 1; font-family: arial;">
 +
<code>ACCESS_DENIED_OBJECT_ACE = _ACCESS_DENIED_OBJECT_ACE;</code>
 +
 
 +
<code>TAccessDeniedObjectAce = ACCESS_DENIED_OBJECT_ACE;</code>
 +
 
 +
<code>PAccessDeniedObjectAce = PACCESS_DENIED_OBJECT_ACE;</code>
 +
 
 +
<code>PACCESS_DENIED_OBJECT_ACE = ^ACCESS_DENIED_OBJECT_ACE;</code>
 +
 
 +
<code>_ACCESS_DENIED_OBJECT_ACE = record</code>
 +
<div class="mw-collapsible-content" style="text-align: left; padding-left: 5px;">
 +
{| class="wikitable" style="font-size: 14px; background: white;"
 +
|-
 +
| <code>Header: ACE_HEADER;</code>
 +
| style="width: 50%;"|&nbsp;
 +
|-
 +
| <code>Mask: ACCESS_MASK;</code>
 +
| &nbsp;
 +
|-
 +
| <code>Flags: DWORD;</code>
 +
| &nbsp;
 +
|-
 +
| <code>ObjectType: GUID;</code>
 +
| &nbsp;
 +
|-
 +
| <code>InheritedObjectType: GUID;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SidStart: DWORD;</code>
 +
| &nbsp;
 +
|-
 +
|}
 +
</div></div> 
 +
 +
'''System audit object'''
 +
 
 +
<div class="toccolours mw-collapsible mw-collapsed" style="border: 1; font-family: arial;">
 +
<code>SYSTEM_AUDIT_OBJECT_ACE = _SYSTEM_AUDIT_OBJECT_ACE;</code>
 +
 
 +
<code>TSystemAuditObjectAce = SYSTEM_AUDIT_OBJECT_ACE;</code>
 +
 
 +
<code>PSystemAuditObjectAce = PSYSTEM_AUDIT_OBJECT_ACE;</code>
 +
 
 +
<code>PSYSTEM_AUDIT_OBJECT_ACE = ^SYSTEM_AUDIT_OBJECT_ACE;</code>
 +
 
 +
<code>_SYSTEM_AUDIT_OBJECT_ACE = record</code>
 +
<div class="mw-collapsible-content" style="text-align: left; padding-left: 5px;">
 +
{| class="wikitable" style="font-size: 14px; background: white;"
 +
|-
 +
| <code>Header: ACE_HEADER;</code>
 +
| style="width: 50%;"|&nbsp;
 +
|-
 +
| <code>Mask: ACCESS_MASK;</code>
 +
| &nbsp;
 +
|-
 +
| <code>Flags: DWORD;</code>
 +
| &nbsp;
 +
|-
 +
| <code>ObjectType: GUID;</code>
 +
| &nbsp;
 +
|-
 +
| <code>InheritedObjectType: GUID;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SidStart: DWORD;</code>
 +
| &nbsp;
 +
|-
 +
|}
 +
</div></div> 
 +
 
 +
'''System alarm object'''
 +
 
 +
<div class="toccolours mw-collapsible mw-collapsed" style="border: 1; font-family: arial;">
 +
<code>SYSTEM_ALARM_OBJECT_ACE = _SYSTEM_ALARM_OBJECT_ACE;</code>
 +
 
 +
<code>TSystemAlarmObjectAce = SYSTEM_ALARM_OBJECT_ACE;</code>
 +
 
 +
<code>PSystemAlarmObjectAce = PSYSTEM_ALARM_OBJECT_ACE;</code>
 +
 
 +
<code>PSYSTEM_ALARM_OBJECT_ACE = ^SYSTEM_ALARM_OBJECT_ACE;</code>
 +
 
 +
<code>_SYSTEM_ALARM_OBJECT_ACE = record</code>
 +
<div class="mw-collapsible-content" style="text-align: left; padding-left: 5px;">
 +
{| class="wikitable" style="font-size: 14px; background: white;"
 +
|-
 +
| <code>Header: ACE_HEADER;</code>
 +
| style="width: 50%;"|&nbsp;
 +
|-
 +
| <code>Mask: ACCESS_MASK;</code>
 +
| &nbsp;
 +
|-
 +
| <code>Flags: DWORD;</code>
 +
| &nbsp;
 +
|-
 +
| <code>ObjectType: GUID;</code>
 +
| &nbsp;
 +
|-
 +
| <code>InheritedObjectType: GUID;</code>
 +
| &nbsp;
 +
|-
 +
| <code>SidStart: DWORD;</code>
 +
| &nbsp;
 +
|-
 +
|}
 +
</div></div>
 +
 
 +
'''Security descriptor control'''
 +
 
 +
{| class="wikitable" style="font-size: 14px; text-align: left; width: 100%; height: 50px;"
 +
|-
 +
| <code>SECURITY_DESCRIPTOR_CONTROL = WORD;</code>
 +
| style="width: 40%;"|
 +
|-
 +
| <code>PSECURITY_DESCRIPTOR_CONTROL = ^SECURITY_DESCRIPTOR_CONTROL;</code>
 +
| style="width: 40%;"|
 +
|-
 +
| <code>TSecurityDescriptorControl = SECURITY_DESCRIPTOR_CONTROL;</code>
 +
| style="width: 40%;"|
 +
|-
 +
| <code>PSecurityDescriptorControl = PSECURITY_DESCRIPTOR_CONTROL;</code>
 +
| style="width: 40%;"|
 +
|-
 +
|}
 +
 
 +
'''Security descriptor relative'''
 +
 
 +
<div class="toccolours mw-collapsible mw-collapsed" style="border: 1; font-family: arial;">
 +
<code>SECURITY_DESCRIPTOR_RELATIVE = _SECURITY_DESCRIPTOR_RELATIVE;</code>
 +
 
 +
<code>TSecurityDescriptorRelative = SECURITY_DESCRIPTOR_RELATIVE;</code>
 +
 
 +
<code>PSecurityDescriptorRelative = PSECURITY_DESCRIPTOR_RELATIVE;</code>
 +
 
 +
<code>PSECURITY_DESCRIPTOR_RELATIVE = ^SECURITY_DESCRIPTOR_RELATIVE;</code>
 +
 
 +
<code>_SECURITY_DESCRIPTOR_RELATIVE = record</code>
 +
<div class="mw-collapsible-content" style="text-align: left; padding-left: 5px;">
 +
{| class="wikitable" style="font-size: 14px; background: white;"
 +
|-
 +
| <code>Revision: Byte;</code>
 +
| style="width: 50%;"|&nbsp;
 +
|-
 +
| <code>Sbz1: Byte;</code>
 +
| &nbsp;
 +
|-
 +
| <code>Control: SECURITY_DESCRIPTOR_CONTROL;</code>
 +
| &nbsp;
 +
|-
 +
| <code>Owner: DWORD;</code>
 +
| &nbsp;
 +
|-
 +
| <code>Group: DWORD;</code>
 +
| &nbsp;
 +
|-
 +
| <code>Sacl: DWORD;</code>
 +
| &nbsp;
 +
|-
 +
| <code>Dacl: DWORD;</code>
 +
| &nbsp;
 +
|-
 +
|}
 +
</div></div> 
 +
 
 +
'''Security descriptor'''
 +
 
 +
<div class="toccolours mw-collapsible mw-collapsed" style="border: 1; font-family: arial;">
 +
<code>SECURITY_DESCRIPTOR = _SECURITY_DESCRIPTOR;</code>
 +
 
 +
<code>TSecurityDescriptor = SECURITY_DESCRIPTOR;</code>
 +
 
 +
<code>PSecurityDescriptor = PSECURITY_DESCRIPTOR;</code>
 +
 
 +
<code>PPSECURITY_DESCRIPTOR = ^PSECURITY_DESCRIPTOR;</code>
 +
 
 +
<code>PSECURITY_DESCRIPTOR = ^SECURITY_DESCRIPTOR;</code>
 +
 
 +
<code>_SECURITY_DESCRIPTOR = record</code>
 +
<div class="mw-collapsible-content" style="text-align: left; padding-left: 5px;">
 +
{| class="wikitable" style="font-size: 14px; background: white;"
 +
|-
 +
| <code>Revision: Byte;</code>
 +
| style="width: 50%;"|&nbsp;
 +
|-
 +
| <code>Sbz1: Byte;</code>
 +
| &nbsp;
 +
|-
 +
| <code>Control: SECURITY_DESCRIPTOR_CONTROL;</code>
 +
| &nbsp;
 +
|-
 +
| <code>Owner: PSID;</code>
 +
| &nbsp;
 +
|-
 +
| <code>Group: PSID;</code>
 +
| &nbsp;
 +
|-
 +
| <code>Sacl: PACL;</code>
 +
| &nbsp;
 +
|-
 +
| <code>Dacl: PACL;</code>
 +
| &nbsp;
 +
|-
 +
|}
 +
</div></div> 
 +
 
 +
'''Well known SID type'''
 +
 
 +
<div class="toccolours mw-collapsible mw-collapsed" style="border: 1; font-family: arial;">
 +
 
 +
<code>WELL_KNOWN_SID_TYPE = (</code>
 +
<div class="mw-collapsible-content" style="text-align: left; padding-left: 5px;">
 +
{| class="wikitable" style="font-size: 14px; background: white;"
 +
|-
 +
| <code>WinNullSid,</code>
 +
| style="width: 50%;"|&nbsp;
 +
|-
 +
| <code>WinWorldSid,</code>
 +
| &nbsp;
 +
|-
 +
| <code>WinLocalSid,</code>
 +
| &nbsp;
 +
|-
 +
| <code>WinCreatorOwnerSid,</code>
 +
| &nbsp;
 +
|-
 +
| <code>WinCreatorGroupSid,</code>
 +
| &nbsp;
 +
|-
 +
| <code>WinCreatorOwnerServerSid,</code>
 +
| &nbsp;
 +
|-
 +
| <code>WinCreatorGroupServerSid,</code>
 +
| &nbsp;
 +
|-
 +
| <code>WinNtAuthoritySid,</code>
 +
| &nbsp;
 +
|-
 +
| <code>WinDialupSid,</code>
 +
| &nbsp;
 +
|-
 +
| <code>WinNetworkSid,</code>
 +
| &nbsp;
 +
|-
 +
| <code>WinBatchSid,</code>
 +
| &nbsp;
 +
|-
 +
| <code>WinInteractiveSid,</code>
 +
| &nbsp;
 +
|-
 +
| <code>WinServiceSid,</code>
 +
| &nbsp;
 +
|-
 +
| <code>WinAnonymousSid,</code>
 +
| &nbsp;
 +
|-
 +
| <code>WinProxySid,</code>
 +
| &nbsp;
 +
|-
 +
| <code>WinEnterpriseControllersSid,</code>
 +
| &nbsp;
 +
|-
 +
| <code>WinSelfSid,</code>
 +
| &nbsp;
 +
|-
 +
| <code>WinAuthenticatedUserSid,</code>
 +
| &nbsp;
 +
|-
 +
| <code>WinRestrictedCodeSid,</code>
 +
| &nbsp;
 +
|-
 +
| <code>WinTerminalServerSid,</code>
 +
| &nbsp;
 +
|-
 +
| <code>WinRemoteLogonIdSid,</code>
 +
| &nbsp;
 +
|-
 +
| <code>WinLogonIdsSid,</code>
 +
| &nbsp;
 +
|-
 +
| <code>WinLocalSystemSid,</code>
 +
| &nbsp;
 +
|-
 +
| <code>WinLocalServiceSid,</code>
 +
| &nbsp;
 +
|-
 +
| <code>WinNetworkServiceSid,</code>
 +
| &nbsp;
 +
|-
 +
| <code>WinBuiltinDomainSid,</code>
 +
| &nbsp;
 +
|-
 +
| <code>WinBuiltinAdministratorsSid,</code>
 +
| &nbsp;
 +
|-
 +
| <code>WinBuiltinUsersSid,</code>
 +
| &nbsp;
 +
|-
 +
| <code>WinBuiltinGuestsSid,</code>
 +
| &nbsp;
 +
|-
 +
| <code>WinBuiltinPowerUsersSid,</code>
 +
| &nbsp;
 +
|-
 +
| <code>WinBuiltinAccountOperatorsSid,</code>
 +
| &nbsp;
 +
|-
 +
| <code>WinBuiltinSystemOperatorsSid,</code>
 +
| &nbsp;
 +
|-
 +
| <code>WinBuiltinPrintOperatorsSid,</code>
 +
| &nbsp;
 +
|-
 +
| <code>WinBuiltinBackupOperatorsSid,</code>
 +
| &nbsp;
 +
|-
 +
| <code>WinBuiltinReplicatorSid,</code>
 +
| &nbsp;
 +
|-
 +
| <code>WinBuiltinPreWindows2000CompatibleAccessSid,</code>
 +
| &nbsp;
 +
|-
 +
| <code>WinBuiltinRemoteDesktopUsersSid,</code>
 +
| &nbsp;
 +
|-
 +
| <code>WinBuiltinNetworkConfigurationOperatorsSid,</code>
 +
| &nbsp;
 +
|-
 +
| <code>WinAccountAdministratorSid,</code>
 +
| &nbsp;
 +
|-
 +
| <code>WinAccountGuestSid,</code>
 +
| &nbsp;
 +
|-
 +
| <code>WinAccountKrbtgtSid,</code>
 +
| &nbsp;
 +
|-
 +
| <code>WinAccountDomainAdminsSid,</code>
 +
| &nbsp;
 +
|-
 +
| <code>WinAccountDomainUsersSid,</code>
 +
| &nbsp;
 +
|-
 +
| <code>WinAccountDomainGuestsSid,</code>
 +
| &nbsp;
 +
|-
 +
| <code>WinAccountComputersSid,</code>
 +
| &nbsp;
 +
|-
 +
| <code>WinAccountControllersSid,</code>
 +
| &nbsp;
 +
|-
 +
| <code>WinAccountCertAdminsSid,</code>
 +
| &nbsp;
 +
|-
 +
| <code>WinAccountSchemaAdminsSid,</code>
 +
| &nbsp;
 +
|-
 +
| <code>WinAccountEnterpriseAdminsSid,</code>
 +
| &nbsp;
 +
|-
 +
| <code>WinAccountPolicyAdminsSid,</code>
 +
| &nbsp;
 +
|-
 +
| <code>WinAccountRasAndIasServersSid);</code>
 +
| &nbsp;
 +
|-
 +
| <code>TWellKnownSidType = WELL_KNOWN_SID_TYPE;</code>
 +
| &nbsp;
 +
|-
 +
|}
 +
</div></div>
 +
 
 +
'''Well known SID'''
 +
 
 +
<div class="toccolours mw-collapsible mw-collapsed" style="border: 1; font-family: arial;">
 +
<code>PWellKnownSid = ^TWellKnownSid;</code>
 +
 
 +
<code>TWellKnownSid = record</code>
 +
<div class="mw-collapsible-content" style="text-align: left; padding-left: 5px;">
 +
{| class="wikitable" style="font-size: 14px; background: white;"
 +
|-
 +
| <code>SidHeader:TSID;</code>
 +
| style="width: 50%;"|&nbsp;
 +
|-
 +
| <code>SubAuthorities:array[0..5] of DWORD;</code>
 +
| &nbsp;
 +
|-
 +
|}
 +
</div></div> 
 +
 +
'''Well known ACE'''
 +
 
 +
<div class="toccolours mw-collapsible mw-collapsed" style="border: 1; font-family: arial;">
 +
 
 +
<code>TWellKnownAce = record</code>
 +
<div class="mw-collapsible-content" style="text-align: left; padding-left: 5px;">
 +
{| class="wikitable" style="font-size: 14px; background: white;"
 +
|-
 +
|colspan="2"|Note: Not Packed (Descriptor Ace defaults)
 +
|-
 +
| <code>AceType:Byte;</code>
 +
| style="width: 50%;"|&nbsp;
 +
|-
 +
| <code>AceFlags:Byte;</code>
 +
| &nbsp;
 +
|-
 +
| <code>AceSize:Word;</code>
 +
| &nbsp;
 +
|-
 +
| <code>Mask:LongWord;</code>
 +
| &nbsp;
 +
|-
 +
| <code>Sid:TWellKnownSidType;</code>
 +
| &nbsp;
 +
|-
 +
|}
 +
</div></div> 
 +
 +
'''Well known ACL'''
 +
 
 +
<div class="toccolours mw-collapsible mw-collapsed" style="border: 1; font-family: arial;">
 +
 
 +
<code>TWellKnownAcl = record</code>
 +
<div class="mw-collapsible-content" style="text-align: left; padding-left: 5px;">
 +
{| class="wikitable" style="font-size: 14px; background: white;"
 +
|-
 +
|colspan="2"|Note: Not Packed (Descriptor Acl defaults)
 +
|-
 +
| <code>AclRevision:Byte;</code>
 +
| style="width: 50%;"|&nbsp;
 +
|-
 +
| <code>AclSize:Word;</code>
 +
| &nbsp;
 +
|-
 +
| <code>AceCount:Word;</code>
 +
| &nbsp;
 +
|-
 +
| <code>Aces:array[0..7] of TWellKnownAce;</code>
 +
| &nbsp;
 +
|-
 +
|}
 +
</div></div> 
 +
 +
'''Well known descriptor'''
 +
 
 +
<div class="toccolours mw-collapsible mw-collapsed" style="border: 1; font-family: arial;">
 +
<code>PWellKnownDescriptor = ^TWellKnownDescriptor;</code>
 +
 
 +
<code>TWellKnownDescriptor = record</code>
 +
<div class="mw-collapsible-content" style="text-align: left; padding-left: 5px;">
 +
{| class="wikitable" style="font-size: 14px; background: white;"
 +
|-
 +
|colspan="2"|Note: Not Packed (Descriptor defaults)
 +
|-
 +
| <code>Size:LongWord;</code>
 +
| &nbsp;
 +
|-
 +
| <code>Revision:Byte;</code>
 +
| Revision
 +
|-
 +
| <code>Control:Word;</code>
 +
| Control Flags
 +
|-
 +
| <code>OwnerOffset:LongWord;</code>
 +
| Offset to Owner SID
 +
|-
 +
| <code>GroupOffset:LongWord;</code>
 +
| Offset to Group SID
 +
|-
 +
| <code>SaclOffset:LongWord;</code>
 +
| Offset to SACL
 +
|-
 +
| <code>DaclOffset:LongWord;</code>
 +
| Offset to DACL
 +
|-
 +
| <code>Owner:TWellKnownSidType;</code>
 +
| &nbsp;
 +
|-
 +
| <code>Group:TWellKnownSidType;</code>
 +
| &nbsp;
 +
|-
 +
| <code>Sacl:TWellKnownAcl;</code>
 +
| &nbsp;
 +
|-
 +
| <code>Dacl:TWellKnownAcl;</code>
 +
| &nbsp;
 +
|-
 +
|}
 +
</div></div> 
 +
<br />
  
 
=== Public variables ===
 
=== Public variables ===
 
----
 
----
  
−
''To be documented''
+
''None defined''
  
 
=== Function declarations ===
 
=== Function declarations ===
Line 26: Line 1,553:
  
  
−
'''Security Functions'''
+
'''Security functions'''
  
 
<div class="toccolours mw-collapsible mw-collapsed" style="border: 1; font-family: arial; padding-top: 0px; padding-bottom: 15px;">
 
<div class="toccolours mw-collapsible mw-collapsed" style="border: 1; font-family: arial; padding-top: 0px; padding-bottom: 15px;">
Line 34: Line 1,561:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 46: Line 1,573:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 58: Line 1,585:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 70: Line 1,597:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 82: Line 1,609:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 94: Line 1,621:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 106: Line 1,633:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 118: Line 1,645:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 130: Line 1,657:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 142: Line 1,669:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 154: Line 1,681:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 166: Line 1,693:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 178: Line 1,705:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 190: Line 1,717:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 202: Line 1,729:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 214: Line 1,741:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 226: Line 1,753:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 238: Line 1,765:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 250: Line 1,777:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 262: Line 1,789:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 274: Line 1,801:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 286: Line 1,813:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 298: Line 1,825:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 310: Line 1,837:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 322: Line 1,849:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 334: Line 1,861:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 346: Line 1,873:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 358: Line 1,885:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 370: Line 1,897:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 382: Line 1,909:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 394: Line 1,921:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 406: Line 1,933:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 418: Line 1,945:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 430: Line 1,957:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 442: Line 1,969:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 454: Line 1,981:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 466: Line 1,993:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 478: Line 2,005:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 490: Line 2,017:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 502: Line 2,029:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 514: Line 2,041:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 526: Line 2,053:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 538: Line 2,065:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 550: Line 2,077:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 562: Line 2,089:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 574: Line 2,101:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 586: Line 2,113:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 598: Line 2,125:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 610: Line 2,137:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 625: Line 2,152:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 637: Line 2,164:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 649: Line 2,176:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 661: Line 2,188:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 673: Line 2,200:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 685: Line 2,212:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 697: Line 2,224:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 709: Line 2,236:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 721: Line 2,248:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-
Line 733: Line 2,260:
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
{| class="wikitable" style="font-size: 14px; background: white;"
 
|-
 
|-
−
! '''Note'''
+
! Note
 
| None documented
 
| None documented
 
|-
 
|-

Latest revision as of 04:43, 31 August 2021

Return to Unit Reference


Description

Ultibo Security Interface unit

This unit implements the security support for Ultibo.

Constants


Security specific constants ANYSIZE_*
ANYSIZE_ARRAY = 1;  


SID SID_*
SID_REVISION = 1; Current revision level
SID_MAX_SUB_AUTHORITIES = 15;  
SID_RECOMMENDED_SUB_AUTHORITIES = 1; Will change to around 6 in a future release
 
SECURITY_MIN_SID_SIZE = SizeOf(SID) - SizeOf(DWORD); Account for SubAuthority[0]
SECURITY_MAX_SID_SIZE = SizeOf(SID) - SizeOf(DWORD) + (SID_MAX_SUB_AUTHORITIES * SizeOf(DWORD)); Account for SubAuthority[0]
 
SidTypeUser = 1;  
SidTypeGroup = 2;  
SidTypeDomain = 3;  
SidTypeAlias = 4;  
SidTypeWellKnownGroup = 5;  
SidTypeDeletedAccount = 6;  
SidTypeInvalid = 7;  
SidTypeUnknown = 8;  
SidTypeComputer = 9;  


ACL ACL_*
ACL_REVISION = 2;  
ACL_REVISION_DS = 4;  
 
ACL_REVISION1 = 1;  
ACL_REVISION2 = 2;  
MIN_ACL_REVISION = ACL_REVISION2;  
ACL_REVISION3 = 3;  
ACL_REVISION4 = 4;  
MAX_ACL_REVISION = ACL_REVISION4;  
 
AclRevisionInformation = 1;  
AclSizeInformation = 2;  


ACE ACE_*
The following are the predefined ace types that go into the AceType field of an Ace header
ACCESS_MIN_MS_ACE_TYPE = $0;  
ACCESS_ALLOWED_ACE_TYPE = $0;  
ACCESS_DENIED_ACE_TYPE = $1;  
SYSTEM_AUDIT_ACE_TYPE = $2;  
SYSTEM_ALARM_ACE_TYPE = $3;  
ACCESS_MAX_MS_V2_ACE_TYPE = $3;  
 
ACCESS_ALLOWED_COMPOUND_ACE_TYPE = $4;  
ACCESS_MAX_MS_V3_ACE_TYPE = $4;  
 
ACCESS_MIN_MS_OBJECT_ACE_TYPE = $5;  
ACCESS_ALLOWED_OBJECT_ACE_TYPE = $5;  
ACCESS_DENIED_OBJECT_ACE_TYPE = $6;  
SYSTEM_AUDIT_OBJECT_ACE_TYPE = $7;  
SYSTEM_ALARM_OBJECT_ACE_TYPE = $8;  
ACCESS_MAX_MS_OBJECT_ACE_TYPE = $8;  
 
ACCESS_MAX_MS_V4_ACE_TYPE = $8;  
ACCESS_MAX_MS_ACE_TYPE = $8;  
 
ACCESS_ALLOWED_CALLBACK_ACE_TYPE = $9;  
ACCESS_DENIED_CALLBACK_ACE_TYPE = $A;  
ACCESS_ALLOWED_CALLBACK_OBJECT_ACE_TYPE = $B;  
ACCESS_DENIED_CALLBACK_OBJECT_ACE_TYPE = $C;  
SYSTEM_AUDIT_CALLBACK_ACE_TYPE = $D;  
SYSTEM_ALARM_CALLBACK_ACE_TYPE = $E;  
SYSTEM_AUDIT_CALLBACK_OBJECT_ACE_TYPE = $F;  
SYSTEM_ALARM_CALLBACK_OBJECT_ACE_TYPE = $10;  
 
ACCESS_MAX_MS_V5_ACE_TYPE = $10;  
 
The following are the inherit flags that go into the AceFlags field of an Ace header
OBJECT_INHERIT_ACE = $1;  
CONTAINER_INHERIT_ACE = $2;  
NO_PROPAGATE_INHERIT_ACE = $4;  
INHERIT_ONLY_ACE = $8;  
INHERITED_ACE = $10;  
VALID_INHERIT_FLAGS = $1F;  
 
The following are the currently defined ACE flags that go into the AceFlags field of an ACE header. Each ACE type has its own set of AceFlags.
SYSTEM_AUDIT and SYSTEM_ALARM AceFlags
SUCCESSFUL_ACCESS_ACE_FLAG = $40;  
FAILED_ACCESS_ACE_FLAG = $80;  
 
Currently defined Flags for "OBJECT" ACE types
ACE_OBJECT_TYPE_PRESENT = $1;  
ACE_INHERITED_OBJECT_TYPE_PRESENT = $2;  


Security descriptor SECURITY_DESCRIPTOR_*
SECURITY_DESCRIPTOR_REVISION = 1; Current security descriptor revision value
SECURITY_DESCRIPTOR_REVISION1 = 1;  
 
SE_OWNER_DEFAULTED = $0001;  
SE_GROUP_DEFAULTED = $0002;  
SE_DACL_PRESENT = $0004;  
SE_DACL_DEFAULTED = $0008;  
SE_SACL_PRESENT = $0010;  
SE_SACL_DEFAULTED = $0020;  
SE_DACL_AUTO_INHERIT_REQ = $0100;  
SE_SACL_AUTO_INHERIT_REQ = $0200;  
SE_DACL_AUTO_INHERITED = $0400;  
SE_SACL_AUTO_INHERITED = $0800;  
SE_DACL_PROTECTED = $1000;  
SE_SACL_PROTECTED = $2000;  
SE_RM_CONTROL_VALID = $4000;  
SE_SELF_RELATIVE = $8000;  


Universal well-known SIDs SECURITY_NULL_SID_*
SECURITY_NULL_SID_IDENTIFIER = 0;  
SECURITY_WORLD_SID_IDENTIFIER = 1;  
SECURITY_LOCAL_SID_IDENTIFIER = 2;  
SECURITY_CREATOR_SID_IDENTIFIER = 3;  
SECURITY_NON_UNIQUE_IDENTIFIER = 4;  
SECURITY_RESOURCE_MANAGER_IDENTIFIER = 9;  
 
SECURITY_NULL_SID_AUTHORITY: TSIDIdentifierAuthority = (Value: (0, 0, 0, 0, 0, 0));  
SECURITY_WORLD_SID_AUTHORITY: TSIDIdentifierAuthority = (Value: (0, 0, 0, 0, 0, 1));  
SECURITY_LOCAL_SID_AUTHORITY: TSIDIdentifierAuthority = (Value: (0, 0, 0, 0, 0, 2));  
SECURITY_CREATOR_SID_AUTHORITY: TSIDIdentifierAuthority = (Value: (0, 0, 0, 0, 0, 3));  
SECURITY_NON_UNIQUE_AUTHORITY: TSIDIdentifierAuthority = (Value: (0, 0, 0, 0, 0, 4));  
SECURITY_RESOURCE_MANAGER_AUTHORITY: TSIDIdentifierAuthority = (Value: (0, 0, 0, 0, 0, 9));  
 
SECURITY_NULL_RID = $00000000;  
SECURITY_WORLD_RID = $00000000;  
SECURITY_LOCAL_RID = $00000000;  
 
SECURITY_CREATOR_OWNER_RID = $00000000;  
SECURITY_CREATOR_GROUP_RID = $00000001;  
 
SECURITY_CREATOR_OWNER_SERVER_RID = $00000002;  
SECURITY_CREATOR_GROUP_SERVER_RID = $00000003;  


NT well-known SIDs SECURITY_NT_IDENTIFIER*
SECURITY_NT_IDENTIFIER = 5;  
 
SECURITY_NT_AUTHORITY: TSIDIdentifierAuthority = (Value: (0, 0, 0, 0, 0, 5));  
 
SECURITY_DIALUP_RID = $00000001;  
SECURITY_NETWORK_RID = $00000002;  
SECURITY_BATCH_RID = $00000003;  
SECURITY_INTERACTIVE_RID = $00000004;  
SECURITY_SERVICE_RID = $00000006;  
SECURITY_ANONYMOUS_LOGON_RID = $00000007;  
SECURITY_PROXY_RID = $00000008;  
SECURITY_ENTERPRISE_CONTROLLERS_RID = $00000009;  
SECURITY_SERVER_LOGON_RID = SECURITY_ENTERPRISE_CONTROLLERS_RID;  
SECURITY_PRINCIPAL_SELF_RID = $0000000A;  
SECURITY_AUTHENTICATED_USER_RID = $0000000B;  
SECURITY_RESTRICTED_CODE_RID = $0000000C;  
SECURITY_TERMINAL_SERVER_RID = $0000000D;  
SECURITY_REMOTE_LOGON_RID = $0000000E;  
 
SECURITY_LOGON_IDS_RID = $00000005;  
SECURITY_LOGON_IDS_RID_COUNT = 3;  
SECURITY_LOCAL_SYSTEM_RID = $00000012;  
SECURITY_LOCAL_SERVICE_RID = $00000013;  
SECURITY_NETWORK_SERVICE_RID = $00000014;  
SECURITY_NT_NON_UNIQUE = $00000015;  
SECURITY_NT_NON_UNIQUE_SUB_AUTH_COUNT = 3;  
SECURITY_BUILTIN_DOMAIN_RID = $00000020;  


Well-known users _USER_RID_*
DOMAIN_USER_RID_ADMIN = $000001F4;  
DOMAIN_USER_RID_GUEST = $000001F5;  
DOMAIN_USER_RID_KRBTGT = $000001F6;  


Well-known groups _GROUP_RID_*
DOMAIN_GROUP_RID_ADMINS = $00000200;  
DOMAIN_GROUP_RID_USERS = $00000201;  
DOMAIN_GROUP_RID_GUESTS = $00000202;  
DOMAIN_GROUP_RID_COMPUTERS = $00000203;  
DOMAIN_GROUP_RID_CONTROLLERS = $00000204;  
DOMAIN_GROUP_RID_CERT_ADMINS = $00000205;  
DOMAIN_GROUP_RID_SCHEMA_ADMINS = $00000206;  
DOMAIN_GROUP_RID_ENTERPRISE_ADMINS = $00000207;  
DOMAIN_GROUP_RID_POLICY_ADMINS = $00000208;  


Well-known aliases _ALIAS_RID_*
DOMAIN_ALIAS_RID_ADMINS = $00000220;  
DOMAIN_ALIAS_RID_USERS = $00000221;  
DOMAIN_ALIAS_RID_GUESTS = $00000222;  
DOMAIN_ALIAS_RID_POWER_USERS = $00000223;  
 
DOMAIN_ALIAS_RID_ACCOUNT_OPS = $00000224;  
DOMAIN_ALIAS_RID_SYSTEM_OPS = $00000225;  
DOMAIN_ALIAS_RID_PRINT_OPS = $00000226;  
DOMAIN_ALIAS_RID_BACKUP_OPS = $00000227;  
 
DOMAIN_ALIAS_RID_REPLICATOR = $00000228;  
DOMAIN_ALIAS_RID_RAS_SERVERS = $00000229;  
DOMAIN_ALIAS_RID_PREW2KCOMPACCESS = $0000022A;  
DOMAIN_ALIAS_RID_REMOTE_DESKTOP_USERS = $0000022B;  
DOMAIN_ALIAS_RID_NETWORK_CONFIGURATION_OPS = $0000022C;  


Group attributes _GROUP_*
SE_GROUP_MANDATORY = $00000001;  
SE_GROUP_ENABLED_BY_DEFAULT = $00000002;  
SE_GROUP_ENABLED = $00000004;  
SE_GROUP_OWNER = $00000008;  
SE_GROUP_USE_FOR_DENY_ONLY = $00000010;  
SE_GROUP_LOGON_ID = $C0000000;  
SE_GROUP_RESOURCE = $20000000;  


Type definitions


SID identifier authority

SID_IDENTIFIER_AUTHORITY = _SID_IDENTIFIER_AUTHORITY;

TSidIdentifierAuthority = SID_IDENTIFIER_AUTHORITY;

PSidIdentifierAuthority = PSID_IDENTIFIER_AUTHORITY;

PSID_IDENTIFIER_AUTHORITY = ^SID_IDENTIFIER_AUTHORITY;

_SID_IDENTIFIER_AUTHORITY = record

Value: array [0..5] of Byte;  

SID types

SID = _SID;

PPSID = ^PSID;

TSid = SID;

PSid = ^SID;

_SID = record

Revision: Byte;  
SubAuthorityCount: Byte;  
IdentifierAuthority: SID_IDENTIFIER_AUTHORITY;  
SubAuthority: array [0..ANYSIZE_ARRAY - 1] of DWORD;  

Signed types

BOOL = LongBool;

Unsigned types

UCHAR = Byte;

Pointer types

PUCHAR = ^Byte;

GUID types

GUID = TGUID;

SID name use

_SID_NAME_USE = DWORD;
SID_NAME_USE = _SID_NAME_USE;
PSID_NAME_USE = ^SID_NAME_USE;
TSidNameUse = SID_NAME_USE;
PSidNameUse = PSID_NAME_USE;

SID and attributes

SID_AND_ATTRIBUTES = _SID_AND_ATTRIBUTES;

TSidAndAttributes = SID_AND_ATTRIBUTES;

PSidAndAttributes = PSID_AND_ATTRIBUTES;

PSID_AND_ATTRIBUTES = ^SID_AND_ATTRIBUTES;

_SID_AND_ATTRIBUTES = record

Sid: PSID;  
Attributes: DWORD;  

SID and attributes array

SID_AND_ATTRIBUTES_ARRAY = array [0..ANYSIZE_ARRAY - 1] of SID_AND_ATTRIBUTES;
PSID_AND_ATTRIBUTES_ARRAY = ^SID_AND_ATTRIBUTES_ARRAY;
PSidAndAttributesArray = ^TSidAndAttributesArray;
TSidAndAttributesArray = SID_AND_ATTRIBUTES_ARRAY;

ACL

ACL = _ACL;

TAcl = ACL;

PPACL = ^PACL;

PACL = ^ACL;

_ACL = record

AclRevision: Byte;  
Sbz1: Byte;  
AclSize: Word;  
AceCount: Word;  
Sbz2: Word;  

ACL information class

_ACL_INFORMATION_CLASS = DWORD;
ACL_INFORMATION_CLASS = _ACL_INFORMATION_CLASS;
TAclInformationClass = ACL_INFORMATION_CLASS;

ACL revision information

ACL_REVISION_INFORMATION = _ACL_REVISION_INFORMATION;

TAclRevisionInformation = ACL_REVISION_INFORMATION;

PAclRevisionInformation = PACL_REVISION_INFORMATION;

PACL_REVISION_INFORMATION = ^ACL_REVISION_INFORMATION;

_ACL_REVISION_INFORMATION = record

Note: This record is returned/sent if the user is requesting/setting the AclRevisionInformation
AclRevision: DWORD;  

ACL size information

ACL_SIZE_INFORMATION = _ACL_SIZE_INFORMATION;

TAclSizeInformation = ACL_SIZE_INFORMATION;

PAclSizeInformation = PACL_SIZE_INFORMATION;

PACL_SIZE_INFORMATION = ^ACL_SIZE_INFORMATION;

_ACL_SIZE_INFORMATION = record

Note: This record is returned if the user is requesting AclSizeInformation
AceCount: DWORD;  
AclBytesInUse: DWORD;  
AclBytesFree: DWORD;  

Access mask

ACCESS_MASK = DWORD;
PACCESS_MASK = ^ACCESS_MASK;
TAccessMask = ACCESS_MASK;
PAccessMask = PACCESS_MASK;

ACE header

ACE_HEADER = _ACE_HEADER;

TAceHeader = ACE_HEADER;

PAceHeader = PACE_HEADER;

PACE_HEADER = ^ACE_HEADER;

_ACE_HEADER = record

AceType: Byte;  
AceFlags: Byte;  
AceSize: Word;  

Access allowed

ACCESS_ALLOWED_ACE = _ACCESS_ALLOWED_ACE;

TAccessAllowedAce = ACCESS_ALLOWED_ACE;

PAccessAllowedAce = PACCESS_ALLOWED_ACE;

PACCESS_ALLOWED_ACE = ^ACCESS_ALLOWED_ACE;

_ACCESS_ALLOWED_ACE = record

Header: ACE_HEADER;  
Mask: ACCESS_MASK;  
SidStart: DWORD;  

Access denied

ACCESS_DENIED_ACE = _ACCESS_DENIED_ACE;

TAccessDeniedAce = ACCESS_DENIED_ACE;

PAccessDeniedAce = PACCESS_DENIED_ACE;

PACCESS_DENIED_ACE = ^ACCESS_DENIED_ACE;

_ACCESS_DENIED_ACE = record

Header: ACE_HEADER;  
Mask: ACCESS_MASK;  
SidStart: DWORD;  

System audit

SYSTEM_AUDIT_ACE = _SYSTEM_AUDIT_ACE;

TSystemAuditAce = SYSTEM_AUDIT_ACE;

PSystemAuditAce = PSYSTEM_AUDIT_ACE;

PSYSTEM_AUDIT_ACE = ^SYSTEM_AUDIT_ACE;

_SYSTEM_AUDIT_ACE = record

Header: ACE_HEADER;  
Mask: ACCESS_MASK;  
SidStart: DWORD;  

System alarm

SYSTEM_ALARM_ACE = _SYSTEM_ALARM_ACE;

TSystemAlarmAce = SYSTEM_ALARM_ACE;

PSystemAlarmAce = PSYSTEM_ALARM_ACE;

PSYSTEM_ALARM_ACE = ^SYSTEM_ALARM_ACE;

_SYSTEM_ALARM_ACE = record

Header: ACE_HEADER;  
Mask: ACCESS_MASK;  
SidStart: DWORD;  

Access allowed object

ACCESS_ALLOWED_OBJECT_ACE = _ACCESS_ALLOWED_OBJECT_ACE;

TAccessAllowedObjectAce = ACCESS_ALLOWED_OBJECT_ACE;

PAccessAllowedObjectAce = PACCESS_ALLOWED_OBJECT_ACE;

PACCESS_ALLOWED_OBJECT_ACE = ^ACCESS_ALLOWED_OBJECT_ACE;

_ACCESS_ALLOWED_OBJECT_ACE = record

Header: ACE_HEADER;  
Mask: ACCESS_MASK;  
Flags: DWORD;  
ObjectType: GUID;  
InheritedObjectType: GUID;  
SidStart: DWORD;  

Access denied object

ACCESS_DENIED_OBJECT_ACE = _ACCESS_DENIED_OBJECT_ACE;

TAccessDeniedObjectAce = ACCESS_DENIED_OBJECT_ACE;

PAccessDeniedObjectAce = PACCESS_DENIED_OBJECT_ACE;

PACCESS_DENIED_OBJECT_ACE = ^ACCESS_DENIED_OBJECT_ACE;

_ACCESS_DENIED_OBJECT_ACE = record

Header: ACE_HEADER;  
Mask: ACCESS_MASK;  
Flags: DWORD;  
ObjectType: GUID;  
InheritedObjectType: GUID;  
SidStart: DWORD;  

System audit object

SYSTEM_AUDIT_OBJECT_ACE = _SYSTEM_AUDIT_OBJECT_ACE;

TSystemAuditObjectAce = SYSTEM_AUDIT_OBJECT_ACE;

PSystemAuditObjectAce = PSYSTEM_AUDIT_OBJECT_ACE;

PSYSTEM_AUDIT_OBJECT_ACE = ^SYSTEM_AUDIT_OBJECT_ACE;

_SYSTEM_AUDIT_OBJECT_ACE = record

Header: ACE_HEADER;  
Mask: ACCESS_MASK;  
Flags: DWORD;  
ObjectType: GUID;  
InheritedObjectType: GUID;  
SidStart: DWORD;  

System alarm object

SYSTEM_ALARM_OBJECT_ACE = _SYSTEM_ALARM_OBJECT_ACE;

TSystemAlarmObjectAce = SYSTEM_ALARM_OBJECT_ACE;

PSystemAlarmObjectAce = PSYSTEM_ALARM_OBJECT_ACE;

PSYSTEM_ALARM_OBJECT_ACE = ^SYSTEM_ALARM_OBJECT_ACE;

_SYSTEM_ALARM_OBJECT_ACE = record

Header: ACE_HEADER;  
Mask: ACCESS_MASK;  
Flags: DWORD;  
ObjectType: GUID;  
InheritedObjectType: GUID;  
SidStart: DWORD;  

Security descriptor control

SECURITY_DESCRIPTOR_CONTROL = WORD;
PSECURITY_DESCRIPTOR_CONTROL = ^SECURITY_DESCRIPTOR_CONTROL;
TSecurityDescriptorControl = SECURITY_DESCRIPTOR_CONTROL;
PSecurityDescriptorControl = PSECURITY_DESCRIPTOR_CONTROL;

Security descriptor relative

SECURITY_DESCRIPTOR_RELATIVE = _SECURITY_DESCRIPTOR_RELATIVE;

TSecurityDescriptorRelative = SECURITY_DESCRIPTOR_RELATIVE;

PSecurityDescriptorRelative = PSECURITY_DESCRIPTOR_RELATIVE;

PSECURITY_DESCRIPTOR_RELATIVE = ^SECURITY_DESCRIPTOR_RELATIVE;

_SECURITY_DESCRIPTOR_RELATIVE = record

Revision: Byte;  
Sbz1: Byte;  
Control: SECURITY_DESCRIPTOR_CONTROL;  
Owner: DWORD;  
Group: DWORD;  
Sacl: DWORD;  
Dacl: DWORD;  

Security descriptor

SECURITY_DESCRIPTOR = _SECURITY_DESCRIPTOR;

TSecurityDescriptor = SECURITY_DESCRIPTOR;

PSecurityDescriptor = PSECURITY_DESCRIPTOR;

PPSECURITY_DESCRIPTOR = ^PSECURITY_DESCRIPTOR;

PSECURITY_DESCRIPTOR = ^SECURITY_DESCRIPTOR;

_SECURITY_DESCRIPTOR = record

Revision: Byte;  
Sbz1: Byte;  
Control: SECURITY_DESCRIPTOR_CONTROL;  
Owner: PSID;  
Group: PSID;  
Sacl: PACL;  
Dacl: PACL;  

Well known SID type

WELL_KNOWN_SID_TYPE = (

WinNullSid,  
WinWorldSid,  
WinLocalSid,  
WinCreatorOwnerSid,  
WinCreatorGroupSid,  
WinCreatorOwnerServerSid,  
WinCreatorGroupServerSid,  
WinNtAuthoritySid,  
WinDialupSid,  
WinNetworkSid,  
WinBatchSid,  
WinInteractiveSid,  
WinServiceSid,  
WinAnonymousSid,  
WinProxySid,  
WinEnterpriseControllersSid,  
WinSelfSid,  
WinAuthenticatedUserSid,  
WinRestrictedCodeSid,  
WinTerminalServerSid,  
WinRemoteLogonIdSid,  
WinLogonIdsSid,  
WinLocalSystemSid,  
WinLocalServiceSid,  
WinNetworkServiceSid,  
WinBuiltinDomainSid,  
WinBuiltinAdministratorsSid,  
WinBuiltinUsersSid,  
WinBuiltinGuestsSid,  
WinBuiltinPowerUsersSid,  
WinBuiltinAccountOperatorsSid,  
WinBuiltinSystemOperatorsSid,  
WinBuiltinPrintOperatorsSid,  
WinBuiltinBackupOperatorsSid,  
WinBuiltinReplicatorSid,  
WinBuiltinPreWindows2000CompatibleAccessSid,  
WinBuiltinRemoteDesktopUsersSid,  
WinBuiltinNetworkConfigurationOperatorsSid,  
WinAccountAdministratorSid,  
WinAccountGuestSid,  
WinAccountKrbtgtSid,  
WinAccountDomainAdminsSid,  
WinAccountDomainUsersSid,  
WinAccountDomainGuestsSid,  
WinAccountComputersSid,  
WinAccountControllersSid,  
WinAccountCertAdminsSid,  
WinAccountSchemaAdminsSid,  
WinAccountEnterpriseAdminsSid,  
WinAccountPolicyAdminsSid,  
WinAccountRasAndIasServersSid);  
TWellKnownSidType = WELL_KNOWN_SID_TYPE;  

Well known SID

PWellKnownSid = ^TWellKnownSid;

TWellKnownSid = record

SidHeader:TSID;  
SubAuthorities:array[0..5] of DWORD;  

Well known ACE

TWellKnownAce = record

Note: Not Packed (Descriptor Ace defaults)
AceType:Byte;  
AceFlags:Byte;  
AceSize:Word;  
Mask:LongWord;  
Sid:TWellKnownSidType;  

Well known ACL

TWellKnownAcl = record

Note: Not Packed (Descriptor Acl defaults)
AclRevision:Byte;  
AclSize:Word;  
AceCount:Word;  
Aces:array[0..7] of TWellKnownAce;  

Well known descriptor

PWellKnownDescriptor = ^TWellKnownDescriptor;

TWellKnownDescriptor = record

Note: Not Packed (Descriptor defaults)
Size:LongWord;  
Revision:Byte; Revision
Control:Word; Control Flags
OwnerOffset:LongWord; Offset to Owner SID
GroupOffset:LongWord; Offset to Group SID
SaclOffset:LongWord; Offset to SACL
DaclOffset:LongWord; Offset to DACL
Owner:TWellKnownSidType;  
Group:TWellKnownSidType;  
Sacl:TWellKnownAcl;  
Dacl:TWellKnownAcl;  


Public variables

None defined

Function declarations


Security functions 

function IsWellKnownSid(Sid: PSID; WellKnownSidType: WELL_KNOWN_SID_TYPE): BOOL;
Description: To be documented
Note None documented 


function CreateWellKnownSid(WellKnownSidType: WELL_KNOWN_SID_TYPE; DomainSid: PSID; Sid: PSID; var cbSid: DWORD): BOOL;
Description: To be documented
Note None documented 


function IsValidSid(Sid: PSID): BOOL;
Description: To be documented
Note None documented 


function EqualSid(Sid1, Sid2: PSID): BOOL;
Description: To be documented
Note None documented 


function EqualPrefixSid(Sid1, Sid2: PSID): BOOL;
Description: To be documented
Note None documented 


function GetSidLengthRequired(nSubAuthorityCount: UCHAR): DWORD;
Description: To be documented
Note None documented 


function AllocateAndInitializeSid(const pIdentifierAuthority: TSIDIdentifierAuthority; nSubAuthorityCount: Byte; nSubAuthority0, nSubAuthority1: DWORD; nSubAuthority2, nSubAuthority3, nSubAuthority4: DWORD; nSubAuthority5, nSubAuthority6, nSubAuthority7: DWORD; var Sid: PSID): BOOL;
Description: To be documented
Note None documented 


function FreeSid(Sid: PSID): Pointer;
Description: To be documented
Note None documented 


function InitializeSid(Sid: PSID; const pIdentifierAuthority: TSIDIdentifierAuthority; nSubAuthorityCount: Byte): BOOL;
Description: To be documented
Note None documented 


function GetSidIdentifierAuthority(Sid: PSID): PSIDIdentifierAuthority;
Description: To be documented
Note None documented 


function GetSidSubAuthority(Sid: PSID; nSubAuthority: DWORD): PDWORD;
Description: To be documented
Note None documented 


function GetSidSubAuthorityCount(Sid: PSID): PUCHAR;
Description: To be documented
Note None documented 


function GetLengthSid(Sid: PSID): DWORD;
Description: To be documented
Note None documented 


function CopySid(nDestinationSidLength: DWORD; pDestinationSid, pSourceSid: PSID): BOOL;
Description: To be documented
Note None documented 


function ConvertSidToStringSid(Sid: PSID; var StringSid: PChar): BOOL;
Description: To be documented
Note None documented 


function ConvertStringSidToSid(StringSid: PChar; var Sid: PSID): BOOL;
Description: To be documented
Note None documented 


function IsValidAcl(const pAcl: TACL): BOOL;
Description: To be documented
Note None documented 


function InitializeAcl(var pAcl: TACL; nAclLength, dwAclRevision: DWORD): BOOL;
Description: To be documented
Note None documented 


function GetAclInformation(const pAcl: TACL; pAclInformation: Pointer; nAclInformationLength: DWORD; dwAclInformationClass: TAclInformationClass): BOOL;
Description: To be documented
Note None documented 


function SetAclInformation(var pAcl: TACL; pAclInformation: Pointer; nAclInformationLength: DWORD; dwAclInformationClass: TAclInformationClass): BOOL;
Description: To be documented
Note None documented 


function AddAce(var pAcl: TACL; dwAceRevision, dwStartingAceIndex: DWORD; pAceList: Pointer; nAceListLength: DWORD): BOOL;
Description: To be documented
Note None documented 


function DeleteAce(var pAcl: TACL; dwAceIndex: DWORD): BOOL;
Description: To be documented
Note None documented 


function GetAce(const pAcl: TACL; dwAceIndex: DWORD; var pAce: Pointer): BOOL;
Description: To be documented
Note None documented 


function AddAccessAllowedAce(var pAcl: TACL; dwAceRevision: DWORD; AccessMask: DWORD; Sid: PSID): BOOL;
Description: To be documented
Note None documented 


function AddAccessAllowedAceEx(var pAcl: TACL; dwAceRevision: DWORD; AceFlags: DWORD; AccessMask: DWORD; Sid: PSID): BOOL;
Description: To be documented
Note None documented 


function AddAccessDeniedAce(var pAcl: TACL; dwAceRevision: DWORD; AccessMask: DWORD; Sid: PSID): BOOL;
Description: To be documented
Note None documented 


function AddAccessDeniedAceEx(var pAcl: TACL; dwAceRevision: DWORD; AceFlags: DWORD; AccessMask: DWORD; Sid: PSID): BOOL;
Description: To be documented
Note None documented 


function AddAuditAccessAce(var pAcl: TACL; dwAceRevision: DWORD; dwAccessMask: DWORD; Sid: PSID; bAuditSuccess, bAuditFailure: BOOL): BOOL;
Description: To be documented
Note None documented 


function AddAuditAccessAceEx(var pAcl: TACL; dwAceRevision: DWORD; AceFlags: DWORD; dwAccessMask: DWORD; Sid: PSID; bAuditSuccess, bAuditFailure: BOOL): BOOL;
Description: To be documented
Note None documented 


function AddAccessAllowedObjectAce(var pAcl: TACL; dwAceRevision: DWORD; AceFlags: DWORD; AccessMask: DWORD; ObjectTypeGuid, InheritedObjectTypeGuid: PGUID; Sid: PSID): BOOL;
Description: To be documented
Note None documented 


function AddAccessDeniedObjectAce(var pAcl: TACL; dwAceRevision: DWORD; AceFlags: DWORD; AccessMask: DWORD; ObjectTypeGuid, InheritedObjectTypeGuid: PGUID; Sid: PSID): BOOL;
Description: To be documented
Note None documented 


function AddAuditAccessObjectAce(var pAcl: TACL; dwAceRevision: DWORD; AceFlags: DWORD; AccessMask: DWORD; ObjectTypeGuid, InheritedObjectTypeGuid: PGUID; Sid: PSID; bAuditSuccess, bAuditFailure: BOOL): BOOL;
Description: To be documented
Note None documented 


function FindFirstFreeAce(var pAcl: TACL; var pAce: Pointer): BOOL;
Description: To be documented
Note None documented 


function InitializeSecurityDescriptor(pSecurityDescriptor: PSecurityDescriptor; dwRevision: DWORD): BOOL;
Description: To be documented
Note None documented 


function IsValidSecurityDescriptor(pSecurityDescriptor: PSecurityDescriptor): BOOL;
Description: To be documented
Note None documented 


function GetSecurityDescriptorLength(pSecurityDescriptor: PSecurityDescriptor): DWORD;
Description: To be documented
Note None documented 


function GetSecurityDescriptorControl(pSecurityDescriptor: PSecurityDescriptor; var pControl: SECURITY_DESCRIPTOR_CONTROL; var lpdwRevision: DWORD): BOOL;
Description: To be documented
Note None documented 


function SetSecurityDescriptorControl(pSecurityDescriptor: PSecurityDescriptor; ControlBitsOfInterest, ControlBitsToSet: SECURITY_DESCRIPTOR_CONTROL): BOOL;
Description: To be documented
Note None documented 


function GetSecurityDescriptorDacl(pSecurityDescriptor: PSecurityDescriptor; var lpbDaclPresent: BOOL; var pDacl: PACL; var lpbDaclDefaulted: BOOL): BOOL;
Description: To be documented
Note None documented 


function SetSecurityDescriptorDacl(pSecurityDescriptor: PSecurityDescriptor; bDaclPresent: BOOL; pDacl: PACL; bDaclDefaulted: BOOL): BOOL;
Description: To be documented
Note None documented 


function GetSecurityDescriptorSacl(pSecurityDescriptor: PSecurityDescriptor; var lpbSaclPresent: BOOL; var pSacl: PACL; var lpbSaclDefaulted: BOOL): BOOL;
Description: To be documented
Note None documented 


function SetSecurityDescriptorSacl(pSecurityDescriptor: PSecurityDescriptor; bSaclPresent: BOOL; pSacl: PACL; bSaclDefaulted: BOOL): BOOL;
Description: To be documented
Note None documented 


function GetSecurityDescriptorOwner(pSecurityDescriptor: PSecurityDescriptor; var pOwner: PSID; var lpbOwnerDefaulted: BOOL): BOOL;
Description: To be documented
Note None documented 


function SetSecurityDescriptorOwner(pSecurityDescriptor: PSecurityDescriptor; pOwner: PSID; bOwnerDefaulted: BOOL): BOOL;
Description: To be documented
Note None documented 


function GetSecurityDescriptorGroup(pSecurityDescriptor: PSecurityDescriptor; var pGroup: PSID; var lpbGroupDefaulted: BOOL): BOOL;
Description: To be documented
Note None documented 


function SetSecurityDescriptorGroup(pSecurityDescriptor: PSecurityDescriptor; pGroup: PSID; bGroupDefaulted: BOOL): BOOL;
Description: To be documented
Note None documented 


function MakeSelfRelativeSD(pAbsoluteSecurityDescriptor: PSecurityDescriptor; pSelfRelativeSecurityDescriptor: PSecurityDescriptor; var lpdwBufferLength: DWORD): BOOL;
Description: To be documented
Note None documented 


function MakeAbsoluteSD(pSelfRelativeSecurityDescriptor: PSecurityDescriptor; pAbsoluteSecurityDescriptor: PSecurityDescriptor; var lpdwAbsoluteSecurityDescriptorSi: DWORD; var pDacl: TACL; var lpdwDaclSize: DWORD; var pSacl: TACL; var lpdwSaclSize: DWORD; pOwner: PSID; var lpdwOwnerSize: DWORD; pPrimaryGroup: PSID; var lpdwPrimaryGroupSize: DWORD): BOOL;
Description: To be documented
Note None documented 


function MakeAbsoluteSD2(pSelfRelativeSecurityDescriptor: PSecurityDescriptor; var lpdwBufferSize: DWORD): BOOL;
Description: To be documented
Note None documented


Security helper functions 

function SplitStringSid(const StringSid:String):TStringList;
Description: To be documented
Note None documented 


function CreateDefaultSid(var pCreatedSid: PSID): BOOL;
Description: To be documented
Note None documented 


function DestroyDefaultSid(pDefaultSid: PSID): BOOL;
Description: To be documented
Note None documented 


function CreateDefaultSecurityDescriptor(var pCreatedSecurityDescriptor: PSecurityDescriptor; bFolder: BOOL): BOOL;
Description: To be documented
Note None documented 


function DestroyDefaultSecurityDescriptor(pDefaultSecurityDescriptor: PSecurityDescriptor): BOOL;
Description: To be documented
Note None documented 


function CreateInheritedSecurityDescriptorNT(pParentSecurityDescriptor: PSecurityDescriptor; var pCreatedSecurityDescriptor: PSecurityDescriptor): BOOL;
Description: To be documented
Note None documented 


function CreateInheritedSecurityDescriptor2K(pParentSecurityDescriptor: PSecurityDescriptor; var pCreatedSecurityDescriptor: PSecurityDescriptor): BOOL;
Description: To be documented
Note None documented 


function CreateMergedSecurityDescriptor2K(pParentSecurityDescriptor, pChildSecurityDescriptor: PSecurityDescriptor; var pCreatedSecurityDescriptor: PSecurityDescriptor): BOOL;
Description: To be documented
Note None documented 


function DestroyInheritedSecurityDescriptor(pInheritedSecurityDescriptor: PSecurityDescriptor): BOOL;
Description: To be documented
Note None documented 


function DestroyMergedSecurityDescriptor(pMergedSecurityDescriptor: PSecurityDescriptor): BOOL;
Description: To be documented
Note None documented


Return to Unit Reference

Retrieved from "https://ultibo.org/mediawiki_ultibo_org/index.php?title=Unit_Security&oldid=5056"