Edit

Share via

SECURITY_LOGON_SESSION_DATA structure (ntsecapi.h)

  • Article

The SECURITY_LOGON_SESSION_DATA structure contains information about a logon session.

This structure is used by the LsaGetLogonSessionData function.

Syntax

typedef struct _SECURITY_LOGON_SESSION_DATA {
  ULONG                     Size;
  LUID                      LogonId;
  LSA_UNICODE_STRING        UserName;
  LSA_UNICODE_STRING        LogonDomain;
  LSA_UNICODE_STRING        AuthenticationPackage;
  ULONG                     LogonType;
  ULONG                     Session;
  PSID                      Sid;
  LARGE_INTEGER             LogonTime;
  LSA_UNICODE_STRING        LogonServer;
  LSA_UNICODE_STRING        DnsDomainName;
  LSA_UNICODE_STRING        Upn;
  ULONG                     UserFlags;
  LSA_LAST_INTER_LOGON_INFO LastLogonInfo;
  LSA_UNICODE_STRING        LogonScript;
  LSA_UNICODE_STRING        ProfilePath;
  LSA_UNICODE_STRING        HomeDirectory;
  LSA_UNICODE_STRING        HomeDirectoryDrive;
  LARGE_INTEGER             LogoffTime;
  LARGE_INTEGER             KickOffTime;
  LARGE_INTEGER             PasswordLastSet;
  LARGE_INTEGER             PasswordCanChange;
  LARGE_INTEGER             PasswordMustChange;
} SECURITY_LOGON_SESSION_DATA, *PSECURITY_LOGON_SESSION_DATA;

Members

Size

The size of the structure, in bytes.

LogonId

A locally unique identifier (LUID) that identifies a logon session.

UserName

An LSA_UNICODE_STRING structure that contains the account name of the security principal that owns the logon session.

LogonDomain

An LSA_UNICODE_STRING structure that contains the name of the domain used to authenticate the owner of the logon session.

AuthenticationPackage

An LSA_UNICODE_STRING structure that contains the name of the authentication package used to authenticate the owner of the logon session.

LogonType

A SECURITY_LOGON_TYPE value that identifies the logon method.

Session

A Terminal Services session identifier. This member may be zero.

Sid

A pointer to the user's security identifier (SID).

LogonTime

The time the session owner logged on.

LogonServer

An LSA_UNICODE_STRING structure that contains the name of the server used to authenticate the owner of the logon session.

DnsDomainName

An LSA_UNICODE_STRING structure that contains the DNS name for the owner of the logon session.

Upn

An LSA_UNICODE_STRING structure that contains the user principal name (UPN) for the owner of the logon session.

UserFlags

The user flags for the logon session.

Windows Server 2003 R2, Windows XP with SP1 and earlier, Windows Server 2003 and Windows XP:  This member is not supported.

Value Meaning
LOGON_OPTIMIZED
0x4000
 The logon is an optimized logon session.
LOGON_WINLOGON
0x8000
 The logon was created for Winlogon.
LOGON_PKINIT
0x10000
 The Kerberos PKINIT extension was used to authenticate the user in this logon session.
LOGON_NOT_OPTIMIZED
0x20000
 Optimized logon has been disabled for this account.

LastLogonInfo

An LSA_LAST_INTER_LOGON_INFO structure that contains the information on the last logon session.

Windows Server 2003 R2, Windows XP with SP1 and earlier, Windows Server 2003 and Windows XP:  This member is not supported.

LogonScript

An LSA_UNICODE_STRING structure that contains the script used for logging on.

Windows Server 2003 R2, Windows XP with SP1 and earlier, Windows Server 2003 and Windows XP:  This member is not supported.

ProfilePath

An LSA_UNICODE_STRING structure that contains the path to the user's profile.

Windows Server 2003 R2, Windows XP with SP1 and earlier, Windows Server 2003 and Windows XP:  This member is not supported.

HomeDirectory

An LSA_UNICODE_STRING structure that contains the home directory for the logon session.

Windows Server 2003 R2, Windows XP with SP1 and earlier, Windows Server 2003 and Windows XP:  This member is not supported.

HomeDirectoryDrive

An LSA_UNICODE_STRING structure that contains the drive location of the home directory of the logon session.

Windows Server 2003 R2, Windows XP with SP1 and earlier, Windows Server 2003 and Windows XP:  This member is not supported.

LogoffTime

The time stamp of when the session user logged off.

Windows Server 2003 R2, Windows XP with SP1 and earlier, Windows Server 2003 and Windows XP:  This member is not supported.

KickOffTime

The time that the logon session must end.

Windows Server 2003 R2, Windows XP with SP1 and earlier, Windows Server 2003 and Windows XP:  This member is not supported.

PasswordLastSet

The time when the user last changed the password. Note It is up to the Authentication Package to initialize this value and it may not be initialized.

Windows Server 2003 R2, Windows XP with SP1 and earlier, Windows Server 2003 and Windows XP:  This member is not supported.

PasswordCanChange

The password can be changed during the logon session.

Windows Server 2003 R2, Windows XP with SP1 and earlier, Windows Server 2003 and Windows XP:  This member is not supported.

PasswordMustChange

The password must be changed during the logon session.

Windows Server 2003 R2, Windows XP with SP1 and earlier, Windows Server 2003 and Windows XP:  This member is not supported.

Remarks

This structure is allocated by the LSA. When the structure is no longer required, free it by using the LSAFreeReturnBuffer function.

Requirements

Requirement Value
Minimum supported client Windows XP [desktop apps only]
Minimum supported server Windows Server 2003 [desktop apps only]
Header ntsecapi.h