3.1.4.2.20 Receiving an EfsRpcQueryProtectors (Opnum 22)
The EfsRpcQueryProtectors method is used by the client to query the metadata of an encrypted object for protectors that are either RMS or DPAPI-NG and whose associated private keys can be used to decrypt the object.<64>
-
DWORD EfsRpcQueryProtectors( [in] handle_t binding_h, [in, string] wchar_t* FileName, [out] PENCRYPTION_PROTECTOR_LIST **ppProtectorList );
binding_h: This is an RPC binding handle parameter, as specified in [C706] and [MS-RPCE] section 2.
FileName: An EFSRPC identifier, as specified in section 2.2.1.
ppProtectorList: A pointer to a list of ENCRYPTION_PROTECTOR structures as specified in section 2.2.19.
Return Values: The server MUST return a nonzero value.