Partager via

3.2.5.13 NetUserGetInfo Command

  • Article

The Remote Administration Protocol server MUST process NetUserGetInfoRequest as follows:

  1. The server MUST validate that the incoming ParamDesc field of the Remote Administration Protocol request contains the ASCII string "zWrLh"; if it does not, the server SHOULD format a Remote Administration Protocol response with the Win32ErrorCode set to ERROR_INVALID_PARAMETER (0x0057), and then return the response to the client.<84>

  2. If the information level is 0, then the server implementing NetUserGetInfo MUST fill the RAPOutData field of SMB_TRANSACTION response with NetUserInfo0 structure.

  3. If the information level is 1, then the server implementing NetUserGetInfo MUST fill the RAPOutData field of SMB_TRANSACTION response with the NetUserInfo1 structure.

  4. If the information level is 2, then the server implementing NetUserGetInfo MUST fill the RAPOutData field of SMB_TRANSACTION response with the NetUserInfo2 structure.

  5. If the information level is 10, then the server implementing NetUserGetInfo MUST fill the RAPOutData field of SMB_TRANSACTION response with the NetUserInfo10 structure.

  6. If the information level is 11, then the server implementing NetUserGetInfo MUST fill the RAPOutData field of SMB_TRANSACTION response with the NetUserInfo11 structure.

  7. If the information level is any value other than 0, 1, 2, 10 and 11, the server implementing NetUserGetInfo MUST set the Win32ErrorCode value in the Remote Administration Protocol response message to ERROR_INVALID_LEVEL (0x007C).

  8. The Remote Administration Protocol server MUST create a Remote Administration Protocol response message with the RAPOutParams set to the contents of a NetUserGetInfoResponse message. The Remote Administration Protocol server MUST return information about user configuration (as specified in section 2.5.8.3.5). This information SHOULD be obtained using the Security Account Manager (SAM) Remote Protocol [MS-SAMR] as follows:

    • The server MUST issue a SamrConnect request as specified in [MS-SAMR] section 3.1.5.1.4, with the following parameters:

      Parameter

      Value

      ServerName

      The name of the local machine

      DesiredAccess

      0x31

    • If this call succeeds, the server MUST issue a SamrLookupDomainInSamServer request as specified in [MS-SAMR] section 3.1.5.11.1, with the following parameters:

      Parameter

      Value

      ServerHandle

      The serverHandle value returned from the SamrConnect request

      Name

      The name of the local machine

    • If this call succeeds, the server MUST issue a SamrOpenDomain request as specified in [MS-SAMR] section 3.1.5.1.5, with the following parameters:

      Parameter

      Value

      ServerHandle

      The serverHandle value returned from the SamrConnect request

      DesiredAccess

      0x200

      DomainId

      The DomainId value returned from the SamrLookupDomainInSamServer request

    • If this call succeeds, the server MUST issue a SamrLookupNamesInDomain request as specified in [MS-SAMR] section 3.1.5.11.2, with the following parameters:

      Parameter

      Value

      DomainHandle

      The domainHandle value returned from the SamrOpenDomain request

      Count

      1

      Names

      NetUserGetInfoRequest.Name

    • If this call succeeds, the server MUST issue a SamrOpenUser request as specified in [MS-SAMR] section 3.1.5.1.9, with the following parameters:

      Parameter

      Value

      DomainHandle

      The domainHandle value returned from the SamrOpenDomain request

      DesiredAccess

      0x2031A

      UserId

      The RID value returned from the SamrLookupNamesInDomain request

    • If this call succeeds, the server MUST issue a SamrQueryInformationUser2 request as specified in [MS-SAMR] section 3.1.5.5.5, with the following parameters:

      Parameter

      Value

      UserHandle

      The userHandle value returned from the SamrOpenUser request

      UserInformationClass

      UserAllInformation

      If any of the SAM requests fail, the error code MUST be returned to the caller. If the query succeeds, the server MUST construct a NetUserGetInfoResponse message from the information in the SAMPR_USER_ALL_INFORMATION structure according to the following mapping:

      NetUserGetInfoResponse field

      SAMPR_USER_ALL_INFORMATION field

      Name

      UserName

      CommentLow and CommentHigh

      AdminComment

      UserCommentLow and UserCommentHigh

      UserComment

      FullNameLow and FullNameHigh

      FullName

      Priv

      UserAccountControl

      AuthFlags

      UserAccountControl

      PasswordAge

      PasswordLastSet

      HomeDirLow and HomeDirHigh

      HomeDirectory

      ParmsLow and ParmsHigh

      Parameters

      LastLogon

      LastLogon

      LastLogoff

      LastLogoff

      BadPWCount

      BadPasswordCount

      NumLogons

      LogonCount

      LogonServerLow and LogonServerHigh

      "\\*"

      CountryCode

      CountryCode

      WorkstationsLow and WorkstationsHigh

      WorkStations

      MaxStorage

      0xFFFFFFFF

      UnitsPerWeek

      _SAMPR_LOGON_HOURS.UnitsPerWeek

      LogonHoursLow and LogonHoursHigh

      _SAMPR_LOGON_HOURS.LogonHours

      CodePage

      CodePage

  9. If the request ReceiveBuffersSize field is less than the response TotalBytesAvailable field, the Remote Administration Protocol server MUST set the Win32ErrorCode value in the Remote Administration Protocol response message to ERROR_MORE_DATA (0x00EA).

  10. If any other errors occur during the response processing, the Remote Administration Protocol server MUST fill the Win32ErrorCode value in the Remote Administration Protocol response message with the Win32ErrorCode corresponding to the error, as specified in [MS-ERREF]. Otherwise, the Remote Administration Protocol server MUST set Win32ErrorCode to ERROR_SUCCESS (0X0000).