Share via

2.2.1.5.19 NETLOGON_DELTA_POLICY

  • Article

The NETLOGON_DELTA_POLICY structure contains information about the LSA policy. This structure is used for replicating the LSA policy data from the PDC to a BDC, as detailed in section 3.6.

 typedef struct _NETLOGON_DELTA_POLICY {
   ULONG MaximumLogSize;
   OLD_LARGE_INTEGER AuditRetentionPeriod;
   UCHAR AuditingMode;
   ULONG MaximumAuditEventCount;
   [size_is(MaximumAuditEventCount + 1)] 
     ULONG * EventAuditingOptions;
   UNICODE_STRING PrimaryDomainName;
   PRPC_SID PrimaryDomainSid;
   NLPR_QUOTA_LIMITS QuotaLimits;
   OLD_LARGE_INTEGER ModifiedId;
   OLD_LARGE_INTEGER DatabaseCreationTime;
   SECURITY_INFORMATION SecurityInformation;
   ULONG SecuritySize;
   [size_is(SecuritySize)] UCHAR * SecurityDescriptor;
   UNICODE_STRING DummyString1;
   UNICODE_STRING DummyString2;
   UNICODE_STRING DummyString3;
   UNICODE_STRING DummyString4;
   ULONG DummyLong1;
   ULONG DummyLong2;
   ULONG DummyLong3;
   ULONG DummyLong4;
 } NETLOGON_DELTA_POLICY,
  *PNETLOGON_DELTA_POLICY;

MaximumLogSize: This field has the same meaning as the identically named field of the POLICY_AUDIT_LOG_INFO structure, as specified in [MS-LSAD] section 2.2.4.3.

AuditRetentionPeriod: This field has the same meaning as the identically named field of the POLICY_AUDIT_LOG_INFO structure, as specified in [MS-LSAD] section 2.2.4.3.

AuditingMode: This field has the same meaning as the identically named field of the LSAPR_POLICY_AUDIT_EVENTS_INFO structure, as specified in [MS-LSAD] section 2.2.4.4.

MaximumAuditEventCount: This field has the same meaning as the identically named field of the LSAPR_POLICY_AUDIT_EVENTS_INFO structure, as specified in [MS-LSAD] section 2.2.4.4.

EventAuditingOptions: This field has the same meaning as the identically named field of the LSAPR_POLICY_AUDIT_EVENTS_INFO structure, as specified in [MS-LSAD] section 2.2.4.4.

PrimaryDomainName: A UNICODE_STRING structure that contains the NetBIOS name of the primary domain.

PrimaryDomainSid:A pointer to the SID for the primary domain.

QuotaLimits: An NLPR_QUOTA_LIMITS structure, as specified in section 2.2.1.5.2, that contains information about system resource quotas imposed on an account.

ModifiedId: An OLD_LARGE_INTEGER structure, as specified in [MS-SAMR] section 2.2.2.2, that contains the count that is incremented each time the database is modified. This count is the database serial number for the database.

DatabaseCreationTime: A 64-bit time stamp, equivalent to a FILETIME, specifying when the database was created.

SecurityInformation: A SECURITY_INFORMATION bit flag that contains security information about the policy. For details about SECURITY_INFORMATION structure, see [MS-DTYP] section 2.4.7.

SecuritySize: The size, in bytes, of the SecurityDescriptor field.

SecurityDescriptor: A pointer to a SECURITY_DESCRIPTOR structure, as specified in [MS-DTYP] section 2.4.6, that describes the security settings for the LSA policy object.

DummyString1: A STRING structure, defined in section 2.2.1.1.2, that MUST contain 0 for the Length field, 0 for the MaximumLength field, and NULL for the Buffer field. It is ignored upon receipt. The Netlogon usage of dummy fields is defined in section 1.3.8.1.2.

DummyString2: See definition for DummyString1.

DummyString3: See definition for DummyString1.

DummyString4: See definition for DummyString1.

DummyLong1: MUST be set to zero and MUST be ignored on receipt. The Netlogon usage of dummy fields is defined in section 1.3.8.1.2.

DummyLong2: See definition for DummyLong1.

DummyLong3: See definition for DummyLong1.

DummyLong4: See definition for DummyLong1.