2.2.2.10 VERSION

The VERSION structure contains operating system version information that SHOULD<31> be ignored. This structure is used for debugging purposes only and its value does not affect NTLM message processing. It is populated in the NEGOTIATE_MESSAGE, CHALLENGE_MESSAGE, and AUTHENTICATE_MESSAGE messages only if NTLMSSP_NEGOTIATE_VERSION is negotiated; otherwise, it MUST be set to all zero.<32>


0


1


2


3


4


5


6


7


8


9

1
0


1


2


3


4


5


6


7


8


9

2
0


1


2


3


4


5


6


7


8


9

3
0


1

ProductMajorVersion

ProductMinorVersion

ProductBuild

Reserved

NTLMRevisionCurrent

ProductMajorVersion (1 byte): An 8-bit unsigned integer that SHOULD<33> contain the major version number of the operating system in use.

ProductMinorVersion (1 byte): An 8-bit unsigned integer that SHOULD<34> contain the minor version number of the operating system in use.

ProductBuild (2 bytes): A 16-bit unsigned integer that contains the build number of the operating system in use. This field SHOULD be set to a 16-bit quantity that identifies the operating system build number.

Reserved (3 bytes): A 24-bit data area that SHOULD be set to zero and MUST be ignored by the recipient.

NTLMRevisionCurrent (1 byte): An 8-bit unsigned integer that contains a value indicating the current revision of the NTLMSSP in use. This field SHOULD contain the following value:

Value

Meaning

NTLMSSP_REVISION_W2K3

0x0F

Version 15 of the NTLMSSP is in use.