Using seed 1105458035 Running RPC-SAMR testing samr_Connect samr_Connect: struct samr_Connect in: struct samr_Connect system_name : NULL access_mask : 0x02000000 (33554432) samr_Connect: struct samr_Connect out: struct samr_Connect connect_handle : * connect_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 9711b593-2ecb-4aa5-9c71-5a82217e1b64 result : NT_STATUS_OK testing samr_Connect2 samr_Connect2: struct samr_Connect2 in: struct samr_Connect2 system_name : NULL access_mask : 0x02000000 (33554432) samr_Connect2: struct samr_Connect2 out: struct samr_Connect2 connect_handle : * connect_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 41cd9141-1341-4483-8017-2cbbf576b2ef result : NT_STATUS_OK samr_Close: struct samr_Close in: struct samr_Close handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 9711b593-2ecb-4aa5-9c71-5a82217e1b64 samr_Close: struct samr_Close out: struct samr_Close handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : NT_STATUS_OK testing samr_Connect3 samr_Connect3: struct samr_Connect3 in: struct samr_Connect3 system_name : NULL unknown : 0x00000000 (0) access_mask : 0x02000000 (33554432) Connect3 failed - NT_STATUS_NET_WRITE_FAULT testing samr_Connect4 samr_Connect4: struct samr_Connect4 in: struct samr_Connect4 system_name : * system_name : '' unknown : 0x00000000 (0) access_mask : 0x02000000 (33554432) Connect4 failed - NT_STATUS_NET_WRITE_FAULT testing samr_Connect5 samr_Connect5: struct samr_Connect5 in: struct samr_Connect5 system_name : * system_name : '' access_mask : 0x02000000 (33554432) level : 0x00000001 (1) info : * info : union samr_ConnectInfo(case 1) info1: struct samr_ConnectInfo1 unknown1 : 0x00000000 (0) unknown2 : 0x00000000 (0) Connect5 failed - NT_STATUS_NET_WRITE_FAULT samr_QuerySecurity: struct samr_QuerySecurity in: struct samr_QuerySecurity handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 41cd9141-1341-4483-8017-2cbbf576b2ef sec_info : 0x00000007 (7) samr_QuerySecurity: struct samr_QuerySecurity out: struct samr_QuerySecurity sdbuf : * sdbuf: struct sec_desc_buf sd_size : 0x00000068 (104) sd : * sd: struct security_descriptor revision : SEC_DESC_REVISION_1 (1) type : 0x8004 (32772) 0: SEC_DESC_OWNER_DEFAULTED 0: SEC_DESC_GROUP_DEFAULTED 1: SEC_DESC_DACL_PRESENT 0: SEC_DESC_DACL_DEFAULTED 0: SEC_DESC_SACL_PRESENT 0: SEC_DESC_SACL_DEFAULTED 0: SEC_DESC_DACL_TRUSTED 0: SEC_DESC_SERVER_SECURITY 0: SEC_DESC_DACL_AUTO_INHERIT_REQ 0: SEC_DESC_SACL_AUTO_INHERIT_REQ 0: SEC_DESC_DACL_AUTO_INHERITED 0: SEC_DESC_SACL_AUTO_INHERITED 0: SEC_DESC_DACL_PROTECTED 0: SEC_DESC_SACL_PROTECTED 0: SEC_DESC_RM_CONTROL_VALID 1: SEC_DESC_SELF_RELATIVE owner_sid : * owner_sid : S-1-5-32-544 group_sid : * group_sid : S-1-5-32-544 sacl : * sacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0034 (52) num_aces : 0x00000002 (2) aces : * aces: ARRAY(2) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x00020031 (131121) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f003f (983103) trustee : S-1-5-32-544 dacl : * dacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0034 (52) num_aces : 0x00000002 (2) aces : * aces: ARRAY(2) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x00020031 (131121) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f003f (983103) trustee : S-1-5-32-544 result : NT_STATUS_OK samr_SetSecurity: struct samr_SetSecurity in: struct samr_SetSecurity handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 41cd9141-1341-4483-8017-2cbbf576b2ef sec_info : 0x00000007 (7) sdbuf : * sdbuf: struct sec_desc_buf sd_size : 0x0000009c (156) sd : * sd: struct security_descriptor revision : SEC_DESC_REVISION_1 (1) type : 0x8004 (32772) 0: SEC_DESC_OWNER_DEFAULTED 0: SEC_DESC_GROUP_DEFAULTED 1: SEC_DESC_DACL_PRESENT 0: SEC_DESC_DACL_DEFAULTED 0: SEC_DESC_SACL_PRESENT 0: SEC_DESC_SACL_DEFAULTED 0: SEC_DESC_DACL_TRUSTED 0: SEC_DESC_SERVER_SECURITY 0: SEC_DESC_DACL_AUTO_INHERIT_REQ 0: SEC_DESC_SACL_AUTO_INHERIT_REQ 0: SEC_DESC_DACL_AUTO_INHERITED 0: SEC_DESC_SACL_AUTO_INHERITED 0: SEC_DESC_DACL_PROTECTED 0: SEC_DESC_SACL_PROTECTED 0: SEC_DESC_RM_CONTROL_VALID 1: SEC_DESC_SELF_RELATIVE owner_sid : * owner_sid : S-1-5-32-544 group_sid : * group_sid : S-1-5-32-544 sacl : * sacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0034 (52) num_aces : 0x00000002 (2) aces : * aces: ARRAY(2) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x00020031 (131121) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f003f (983103) trustee : S-1-5-32-544 dacl : * dacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0034 (52) num_aces : 0x00000002 (2) aces : * aces: ARRAY(2) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x00020031 (131121) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f003f (983103) trustee : S-1-5-32-544 samr_SetSecurity: struct samr_SetSecurity out: struct samr_SetSecurity result : NT_STATUS_OK samr_QuerySecurity: struct samr_QuerySecurity in: struct samr_QuerySecurity handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 41cd9141-1341-4483-8017-2cbbf576b2ef sec_info : 0x00000007 (7) samr_QuerySecurity: struct samr_QuerySecurity out: struct samr_QuerySecurity sdbuf : * sdbuf: struct sec_desc_buf sd_size : 0x00000068 (104) sd : * sd: struct security_descriptor revision : SEC_DESC_REVISION_1 (1) type : 0x8004 (32772) 0: SEC_DESC_OWNER_DEFAULTED 0: SEC_DESC_GROUP_DEFAULTED 1: SEC_DESC_DACL_PRESENT 0: SEC_DESC_DACL_DEFAULTED 0: SEC_DESC_SACL_PRESENT 0: SEC_DESC_SACL_DEFAULTED 0: SEC_DESC_DACL_TRUSTED 0: SEC_DESC_SERVER_SECURITY 0: SEC_DESC_DACL_AUTO_INHERIT_REQ 0: SEC_DESC_SACL_AUTO_INHERIT_REQ 0: SEC_DESC_DACL_AUTO_INHERITED 0: SEC_DESC_SACL_AUTO_INHERITED 0: SEC_DESC_DACL_PROTECTED 0: SEC_DESC_SACL_PROTECTED 0: SEC_DESC_RM_CONTROL_VALID 1: SEC_DESC_SELF_RELATIVE owner_sid : * owner_sid : S-1-5-32-544 group_sid : * group_sid : S-1-5-32-544 sacl : * sacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0034 (52) num_aces : 0x00000002 (2) aces : * aces: ARRAY(2) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x00020031 (131121) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f003f (983103) trustee : S-1-5-32-544 dacl : * dacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0034 (52) num_aces : 0x00000002 (2) aces : * aces: ARRAY(2) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x00020031 (131121) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f003f (983103) trustee : S-1-5-32-544 result : NT_STATUS_OK samr_EnumDomains: struct samr_EnumDomains in: struct samr_EnumDomains connect_handle : * connect_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 41cd9141-1341-4483-8017-2cbbf576b2ef resume_handle : * resume_handle : 0x00000000 (0) buf_size : 0xffffffff (4294967295) samr_EnumDomains: struct samr_EnumDomains out: struct samr_EnumDomains resume_handle : * resume_handle : 0x00000002 (2) sam : * sam: struct samr_SamArray count : 0x00000002 (2) entries : * entries: ARRAY(2) [0]: struct samr_SamEntry idx : 0x00000000 (0) name: struct samr_String length : 0x0010 (16) size : 0x0012 (18) string : * string : 'SPINDOM4' [1]: struct samr_SamEntry idx : 0x00000000 (0) name: struct samr_String length : 0x000e (14) size : 0x0010 (16) string : * string : 'Builtin' num_entries : 0x00000002 (2) result : NT_STATUS_OK Testing LookupDomain(SPINDOM4) samr_LookupDomain: struct samr_LookupDomain in: struct samr_LookupDomain connect_handle : * connect_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 41cd9141-1341-4483-8017-2cbbf576b2ef domain : * domain: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : NULL samr_LookupDomain: struct samr_LookupDomain out: struct samr_LookupDomain sid : NULL result : NT_STATUS_INVALID_PARAMETER samr_LookupDomain: struct samr_LookupDomain in: struct samr_LookupDomain connect_handle : * connect_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 41cd9141-1341-4483-8017-2cbbf576b2ef domain : * domain: struct samr_String length : 0x0018 (24) size : 0x0018 (24) string : * string : 'xxNODOMAINxx' samr_LookupDomain: struct samr_LookupDomain out: struct samr_LookupDomain sid : NULL result : NT_STATUS_NO_SUCH_DOMAIN samr_LookupDomain: struct samr_LookupDomain in: struct samr_LookupDomain connect_handle : * connect_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 41cd9141-1341-4483-8017-2cbbf576b2ef domain : * domain: struct samr_String length : 0x0010 (16) size : 0x0010 (16) string : * string : 'SPINDOM4' samr_LookupDomain: struct samr_LookupDomain out: struct samr_LookupDomain sid : * sid : S-1-5-21-662975699-1857117334-953900138 result : NT_STATUS_OK Testing GetDomPwInfo with name SPINDOM4 samr_GetDomPwInfo: struct samr_GetDomPwInfo in: struct samr_GetDomPwInfo name : * name: struct samr_String length : 0x0010 (16) size : 0x0010 (16) string : * string : 'SPINDOM4' samr_GetDomPwInfo: struct samr_GetDomPwInfo out: struct samr_GetDomPwInfo info: struct samr_PwInfo min_password_length : 0x0000 (0) password_properties : 0x00000000 (0) result : NT_STATUS_OK Testing GetDomPwInfo with name \\SPIN4BDC1 samr_GetDomPwInfo: struct samr_GetDomPwInfo in: struct samr_GetDomPwInfo name : * name: struct samr_String length : 0x0016 (22) size : 0x0016 (22) string : * string : '\\SPIN4BDC1' samr_GetDomPwInfo: struct samr_GetDomPwInfo out: struct samr_GetDomPwInfo info: struct samr_PwInfo min_password_length : 0x0000 (0) password_properties : 0x00000000 (0) result : NT_STATUS_OK Testing GetDomPwInfo with name \\__NONAME__ samr_GetDomPwInfo: struct samr_GetDomPwInfo in: struct samr_GetDomPwInfo name : * name: struct samr_String length : 0x0018 (24) size : 0x0018 (24) string : * string : '\\__NONAME__' samr_GetDomPwInfo: struct samr_GetDomPwInfo out: struct samr_GetDomPwInfo info: struct samr_PwInfo min_password_length : 0x0000 (0) password_properties : 0x00000000 (0) result : NT_STATUS_OK Testing GetDomPwInfo with name \\Builtin samr_GetDomPwInfo: struct samr_GetDomPwInfo in: struct samr_GetDomPwInfo name : * name: struct samr_String length : 0x0012 (18) size : 0x0012 (18) string : * string : '\\Builtin' samr_GetDomPwInfo: struct samr_GetDomPwInfo out: struct samr_GetDomPwInfo info: struct samr_PwInfo min_password_length : 0x0000 (0) password_properties : 0x00000000 (0) result : NT_STATUS_OK Testing OpenDomain samr_OpenDomain: struct samr_OpenDomain in: struct samr_OpenDomain connect_handle : * connect_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 41cd9141-1341-4483-8017-2cbbf576b2ef access_mask : 0x02000000 (33554432) sid : * sid : S-1-5-21-662975699-1857117334-953900138 samr_OpenDomain: struct samr_OpenDomain out: struct samr_OpenDomain domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f result : NT_STATUS_OK samr_Close: struct samr_Close in: struct samr_Close handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 41cd9141-1341-4483-8017-2cbbf576b2ef samr_Close: struct samr_Close out: struct samr_Close handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : NT_STATUS_OK samr_QuerySecurity: struct samr_QuerySecurity in: struct samr_QuerySecurity handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f sec_info : 0x00000007 (7) samr_QuerySecurity: struct samr_QuerySecurity out: struct samr_QuerySecurity sdbuf : * sdbuf: struct sec_desc_buf sd_size : 0x000000b0 (176) sd : * sd: struct security_descriptor revision : SEC_DESC_REVISION_1 (1) type : 0x8004 (32772) 0: SEC_DESC_OWNER_DEFAULTED 0: SEC_DESC_GROUP_DEFAULTED 1: SEC_DESC_DACL_PRESENT 0: SEC_DESC_DACL_DEFAULTED 0: SEC_DESC_SACL_PRESENT 0: SEC_DESC_SACL_DEFAULTED 0: SEC_DESC_DACL_TRUSTED 0: SEC_DESC_SERVER_SECURITY 0: SEC_DESC_DACL_AUTO_INHERIT_REQ 0: SEC_DESC_SACL_AUTO_INHERIT_REQ 0: SEC_DESC_DACL_AUTO_INHERITED 0: SEC_DESC_SACL_AUTO_INHERITED 0: SEC_DESC_DACL_PROTECTED 0: SEC_DESC_SACL_PROTECTED 0: SEC_DESC_RM_CONTROL_VALID 1: SEC_DESC_SELF_RELATIVE owner_sid : * owner_sid : S-1-5-32-544 group_sid : * group_sid : S-1-5-32-544 sacl : * sacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x007c (124) num_aces : 0x00000005 (5) aces : * aces: ARRAY(5) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x00020385 (131973) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000203c5 (132037) trustee : S-1-5-32-545 [2]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f07ff (985087) trustee : S-1-5-32-544 [3]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000203d5 (132053) trustee : S-1-5-32-547 [4]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000203f5 (132085) trustee : S-1-5-32-548 dacl : * dacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x007c (124) num_aces : 0x00000005 (5) aces : * aces: ARRAY(5) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x00020385 (131973) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000203c5 (132037) trustee : S-1-5-32-545 [2]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f07ff (985087) trustee : S-1-5-32-544 [3]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000203d5 (132053) trustee : S-1-5-32-547 [4]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000203f5 (132085) trustee : S-1-5-32-548 result : NT_STATUS_OK samr_SetSecurity: struct samr_SetSecurity in: struct samr_SetSecurity handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f sec_info : 0x00000007 (7) sdbuf : * sdbuf: struct sec_desc_buf sd_size : 0x0000012c (300) sd : * sd: struct security_descriptor revision : SEC_DESC_REVISION_1 (1) type : 0x8004 (32772) 0: SEC_DESC_OWNER_DEFAULTED 0: SEC_DESC_GROUP_DEFAULTED 1: SEC_DESC_DACL_PRESENT 0: SEC_DESC_DACL_DEFAULTED 0: SEC_DESC_SACL_PRESENT 0: SEC_DESC_SACL_DEFAULTED 0: SEC_DESC_DACL_TRUSTED 0: SEC_DESC_SERVER_SECURITY 0: SEC_DESC_DACL_AUTO_INHERIT_REQ 0: SEC_DESC_SACL_AUTO_INHERIT_REQ 0: SEC_DESC_DACL_AUTO_INHERITED 0: SEC_DESC_SACL_AUTO_INHERITED 0: SEC_DESC_DACL_PROTECTED 0: SEC_DESC_SACL_PROTECTED 0: SEC_DESC_RM_CONTROL_VALID 1: SEC_DESC_SELF_RELATIVE owner_sid : * owner_sid : S-1-5-32-544 group_sid : * group_sid : S-1-5-32-544 sacl : * sacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x007c (124) num_aces : 0x00000005 (5) aces : * aces: ARRAY(5) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x00020385 (131973) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000203c5 (132037) trustee : S-1-5-32-545 [2]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f07ff (985087) trustee : S-1-5-32-544 [3]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000203d5 (132053) trustee : S-1-5-32-547 [4]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000203f5 (132085) trustee : S-1-5-32-548 dacl : * dacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x007c (124) num_aces : 0x00000005 (5) aces : * aces: ARRAY(5) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x00020385 (131973) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000203c5 (132037) trustee : S-1-5-32-545 [2]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f07ff (985087) trustee : S-1-5-32-544 [3]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000203d5 (132053) trustee : S-1-5-32-547 [4]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000203f5 (132085) trustee : S-1-5-32-548 samr_SetSecurity: struct samr_SetSecurity out: struct samr_SetSecurity result : NT_STATUS_OK samr_QuerySecurity: struct samr_QuerySecurity in: struct samr_QuerySecurity handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f sec_info : 0x00000007 (7) samr_QuerySecurity: struct samr_QuerySecurity out: struct samr_QuerySecurity sdbuf : * sdbuf: struct sec_desc_buf sd_size : 0x000000b0 (176) sd : * sd: struct security_descriptor revision : SEC_DESC_REVISION_1 (1) type : 0x8004 (32772) 0: SEC_DESC_OWNER_DEFAULTED 0: SEC_DESC_GROUP_DEFAULTED 1: SEC_DESC_DACL_PRESENT 0: SEC_DESC_DACL_DEFAULTED 0: SEC_DESC_SACL_PRESENT 0: SEC_DESC_SACL_DEFAULTED 0: SEC_DESC_DACL_TRUSTED 0: SEC_DESC_SERVER_SECURITY 0: SEC_DESC_DACL_AUTO_INHERIT_REQ 0: SEC_DESC_SACL_AUTO_INHERIT_REQ 0: SEC_DESC_DACL_AUTO_INHERITED 0: SEC_DESC_SACL_AUTO_INHERITED 0: SEC_DESC_DACL_PROTECTED 0: SEC_DESC_SACL_PROTECTED 0: SEC_DESC_RM_CONTROL_VALID 1: SEC_DESC_SELF_RELATIVE owner_sid : * owner_sid : S-1-5-32-544 group_sid : * group_sid : S-1-5-32-544 sacl : * sacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x007c (124) num_aces : 0x00000005 (5) aces : * aces: ARRAY(5) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x00020385 (131973) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000203c5 (132037) trustee : S-1-5-32-545 [2]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f07ff (985087) trustee : S-1-5-32-544 [3]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000203d5 (132053) trustee : S-1-5-32-547 [4]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000203f5 (132085) trustee : S-1-5-32-548 dacl : * dacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x007c (124) num_aces : 0x00000005 (5) aces : * aces: ARRAY(5) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x00020385 (131973) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000203c5 (132037) trustee : S-1-5-32-545 [2]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f07ff (985087) trustee : S-1-5-32-544 [3]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000203d5 (132053) trustee : S-1-5-32-547 [4]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000203f5 (132085) trustee : S-1-5-32-548 result : NT_STATUS_OK samr_RemoveMemberFromForeignDomain: struct samr_RemoveMemberFromForeignDomain in: struct samr_RemoveMemberFromForeignDomain domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f sid : * sid : S-1-5-32-12-34-56-78-9 samr_RemoveMemberFromForeignDomain: struct samr_RemoveMemberFromForeignDomain out: struct samr_RemoveMemberFromForeignDomain result : NT_STATUS_SPECIAL_ACCOUNT RemoveMemberFromForeignDomain failed - NT_STATUS_SPECIAL_ACCOUNT Testing CreateUser2(samrtorturetest, 0x10) samr_CreateUser2: struct samr_CreateUser2 in: struct samr_CreateUser2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f account_name : * account_name: struct samr_String length : 0x001e (30) size : 0x001e (30) string : * string : 'samrtorturetest' acct_flags : 0x00000010 (16) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 1: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 0: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK access_mask : 0x02000000 (33554432) samr_CreateUser2: struct samr_CreateUser2 out: struct samr_CreateUser2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 access_granted : * access_granted : 0x000000dc (220) rid : * rid : 0x00000000 (0) result : NT_STATUS_INVALID_DOMAIN_ROLE CreateUser2 failed gave incorrect error return - NT_STATUS_INVALID_DOMAIN_ROLE (should be NT_STATUS_OK) Testing CreateUser2(samrtorturetest, 0x11) samr_CreateUser2: struct samr_CreateUser2 in: struct samr_CreateUser2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f account_name : * account_name: struct samr_String length : 0x001e (30) size : 0x001e (30) string : * string : 'samrtorturetest' acct_flags : 0x00000011 (17) 1: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 1: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 0: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK access_mask : 0x02000000 (33554432) samr_CreateUser2: struct samr_CreateUser2 out: struct samr_CreateUser2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 access_granted : * access_granted : 0x0000001c (28) rid : * rid : 0x00000000 (0) result : NT_STATUS_INVALID_PARAMETER Testing CreateUser2(samrtorturetest, 0x210) samr_CreateUser2: struct samr_CreateUser2 in: struct samr_CreateUser2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f account_name : * account_name: struct samr_String length : 0x001e (30) size : 0x001e (30) string : * string : 'samrtorturetest' acct_flags : 0x00000210 (528) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 1: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 0: ACB_SVRTRUST 1: ACB_PWNOEXP 0: ACB_AUTOLOCK access_mask : 0x02000000 (33554432) samr_CreateUser2: struct samr_CreateUser2 out: struct samr_CreateUser2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 access_granted : * access_granted : 0x00000038 (56) rid : * rid : 0x00000000 (0) result : NT_STATUS_INVALID_PARAMETER Testing CreateUser2(samrtorturetestmach$, 0x80) samr_CreateUser2: struct samr_CreateUser2 in: struct samr_CreateUser2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f account_name : * account_name: struct samr_String length : 0x0028 (40) size : 0x0028 (40) string : * string : 'samrtorturetestmach$' acct_flags : 0x00000080 (128) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 1: ACB_WSTRUST 0: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK access_mask : 0x02000000 (33554432) samr_CreateUser2: struct samr_CreateUser2 out: struct samr_CreateUser2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 access_granted : * access_granted : 0x00000038 (56) rid : * rid : 0x00000000 (0) result : NT_STATUS_INVALID_DOMAIN_ROLE CreateUser2 failed gave incorrect error return - NT_STATUS_INVALID_DOMAIN_ROLE (should be NT_STATUS_OK) Testing CreateUser2(samrtorturetestmach$, 0x81) samr_CreateUser2: struct samr_CreateUser2 in: struct samr_CreateUser2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f account_name : * account_name: struct samr_String length : 0x0028 (40) size : 0x0028 (40) string : * string : 'samrtorturetestmach$' acct_flags : 0x00000081 (129) 1: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 1: ACB_WSTRUST 0: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK access_mask : 0x02000000 (33554432) samr_CreateUser2: struct samr_CreateUser2 out: struct samr_CreateUser2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 access_granted : * access_granted : 0x00000038 (56) rid : * rid : 0x00000000 (0) result : NT_STATUS_INVALID_PARAMETER Testing CreateUser2(samrtorturetestmach$, 0x280) samr_CreateUser2: struct samr_CreateUser2 in: struct samr_CreateUser2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f account_name : * account_name: struct samr_String length : 0x0028 (40) size : 0x0028 (40) string : * string : 'samrtorturetestmach$' acct_flags : 0x00000280 (640) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 1: ACB_WSTRUST 0: ACB_SVRTRUST 1: ACB_PWNOEXP 0: ACB_AUTOLOCK access_mask : 0x02000000 (33554432) samr_CreateUser2: struct samr_CreateUser2 out: struct samr_CreateUser2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 access_granted : * access_granted : 0x00000038 (56) rid : * rid : 0x00000000 (0) result : NT_STATUS_INVALID_PARAMETER Testing CreateUser2(samrtorturetestmach$, 0x100) samr_CreateUser2: struct samr_CreateUser2 in: struct samr_CreateUser2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f account_name : * account_name: struct samr_String length : 0x0028 (40) size : 0x0028 (40) string : * string : 'samrtorturetestmach$' acct_flags : 0x00000100 (256) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 1: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK access_mask : 0x02000000 (33554432) samr_CreateUser2: struct samr_CreateUser2 out: struct samr_CreateUser2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 access_granted : * access_granted : 0x00000038 (56) rid : * rid : 0x00000000 (0) result : NT_STATUS_INVALID_DOMAIN_ROLE CreateUser2 failed gave incorrect error return - NT_STATUS_INVALID_DOMAIN_ROLE (should be NT_STATUS_OK) Testing CreateUser2(samrtorturetestmach$, 0x101) samr_CreateUser2: struct samr_CreateUser2 in: struct samr_CreateUser2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f account_name : * account_name: struct samr_String length : 0x0028 (40) size : 0x0028 (40) string : * string : 'samrtorturetestmach$' acct_flags : 0x00000101 (257) 1: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 1: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK access_mask : 0x02000000 (33554432) samr_CreateUser2: struct samr_CreateUser2 out: struct samr_CreateUser2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 access_granted : * access_granted : 0x00000038 (56) rid : * rid : 0x00000000 (0) result : NT_STATUS_INVALID_PARAMETER Testing CreateUser2(samrtorturetestmach$, 0x300) samr_CreateUser2: struct samr_CreateUser2 in: struct samr_CreateUser2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f account_name : * account_name: struct samr_String length : 0x0028 (40) size : 0x0028 (40) string : * string : 'samrtorturetestmach$' acct_flags : 0x00000300 (768) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 1: ACB_SVRTRUST 1: ACB_PWNOEXP 0: ACB_AUTOLOCK access_mask : 0x02000000 (33554432) samr_CreateUser2: struct samr_CreateUser2 out: struct samr_CreateUser2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 access_granted : * access_granted : 0x00000038 (56) rid : * rid : 0x00000000 (0) result : NT_STATUS_INVALID_PARAMETER Testing CreateUser2(samrtorturetestdom$, 0x40) samr_CreateUser2: struct samr_CreateUser2 in: struct samr_CreateUser2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f account_name : * account_name: struct samr_String length : 0x0026 (38) size : 0x0026 (38) string : * string : 'samrtorturetestdom$' acct_flags : 0x00000040 (64) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 1: ACB_DOMTRUST 0: ACB_WSTRUST 0: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK access_mask : 0x02000000 (33554432) samr_CreateUser2: struct samr_CreateUser2 out: struct samr_CreateUser2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 access_granted : * access_granted : 0x00000038 (56) rid : * rid : 0x00000000 (0) result : NT_STATUS_INVALID_DOMAIN_ROLE CreateUser2 failed gave incorrect error return - NT_STATUS_INVALID_DOMAIN_ROLE (should be NT_STATUS_OK) Testing CreateUser2(samrtorturetestdom$, 0x41) samr_CreateUser2: struct samr_CreateUser2 in: struct samr_CreateUser2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f account_name : * account_name: struct samr_String length : 0x0026 (38) size : 0x0026 (38) string : * string : 'samrtorturetestdom$' acct_flags : 0x00000041 (65) 1: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 1: ACB_DOMTRUST 0: ACB_WSTRUST 0: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK access_mask : 0x02000000 (33554432) samr_CreateUser2: struct samr_CreateUser2 out: struct samr_CreateUser2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 access_granted : * access_granted : 0x00000038 (56) rid : * rid : 0x00000000 (0) result : NT_STATUS_INVALID_PARAMETER Testing CreateUser2(samrtorturetestdom$, 0x240) samr_CreateUser2: struct samr_CreateUser2 in: struct samr_CreateUser2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f account_name : * account_name: struct samr_String length : 0x0026 (38) size : 0x0026 (38) string : * string : 'samrtorturetestdom$' acct_flags : 0x00000240 (576) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 1: ACB_DOMTRUST 0: ACB_WSTRUST 0: ACB_SVRTRUST 1: ACB_PWNOEXP 0: ACB_AUTOLOCK access_mask : 0x02000000 (33554432) samr_CreateUser2: struct samr_CreateUser2 out: struct samr_CreateUser2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 access_granted : * access_granted : 0x00000038 (56) rid : * rid : 0x00000000 (0) result : NT_STATUS_INVALID_PARAMETER Testing CreateUser2(samrtorturetest, 0x0) samr_CreateUser2: struct samr_CreateUser2 in: struct samr_CreateUser2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f account_name : * account_name: struct samr_String length : 0x001e (30) size : 0x001e (30) string : * string : 'samrtorturetest' acct_flags : 0x00000000 (0) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 0: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK access_mask : 0x02000000 (33554432) samr_CreateUser2: struct samr_CreateUser2 out: struct samr_CreateUser2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 access_granted : * access_granted : 0x00000038 (56) rid : * rid : 0x00000000 (0) result : NT_STATUS_INVALID_PARAMETER Testing CreateUser2(samrtorturetest, 0x1) samr_CreateUser2: struct samr_CreateUser2 in: struct samr_CreateUser2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f account_name : * account_name: struct samr_String length : 0x001e (30) size : 0x001e (30) string : * string : 'samrtorturetest' acct_flags : 0x00000001 (1) 1: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 0: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK access_mask : 0x02000000 (33554432) samr_CreateUser2: struct samr_CreateUser2 out: struct samr_CreateUser2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 access_granted : * access_granted : 0x00000038 (56) rid : * rid : 0x00000000 (0) result : NT_STATUS_INVALID_PARAMETER Testing CreateUser(samrtorturetest) samr_CreateUser: struct samr_CreateUser in: struct samr_CreateUser domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f account_name : * account_name: struct samr_String length : 0x001e (30) size : 0x001e (30) string : * string : 'samrtorturetest' access_mask : 0x02000000 (33554432) samr_CreateUser: struct samr_CreateUser out: struct samr_CreateUser user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 rid : * rid : 0x00000000 (0) result : NT_STATUS_INVALID_DOMAIN_ROLE CreateUser failed - NT_STATUS_INVALID_DOMAIN_ROLE Testing CreateAlias (samrtorturetestalias) samr_CreateDomAlias: struct samr_CreateDomAlias in: struct samr_CreateDomAlias domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f aliasname : * aliasname: struct samr_String length : 0x0028 (40) size : 0x0028 (40) string : * string : 'samrtorturetestalias' access_mask : 0x02000000 (33554432) samr_CreateDomAlias: struct samr_CreateDomAlias out: struct samr_CreateDomAlias alias_handle : * alias_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 rid : * rid : 0x00000000 (0) result : NT_STATUS_INVALID_DOMAIN_ROLE CreateAlias failed - NT_STATUS_INVALID_DOMAIN_ROLE Testing CreateDomainGroup(samrtorturetestgroup) samr_CreateDomainGroup: struct samr_CreateDomainGroup in: struct samr_CreateDomainGroup domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f name : * name: struct samr_String length : 0x0028 (40) size : 0x0028 (40) string : * string : 'samrtorturetestgroup' access_mask : 0x02000000 (33554432) samr_CreateDomainGroup: struct samr_CreateDomainGroup out: struct samr_CreateDomainGroup group_handle : * group_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 rid : * rid : 0x00000000 (0) result : NT_STATUS_INVALID_DOMAIN_ROLE CreateDomainGroup failed - NT_STATUS_INVALID_DOMAIN_ROLE Testing QueryDomainInfo level 1 samr_QueryDomainInfo: struct samr_QueryDomainInfo in: struct samr_QueryDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0001 (1) samr_QueryDomainInfo: struct samr_QueryDomainInfo out: struct samr_QueryDomainInfo info : * info : union samr_DomainInfo(case 1) info1: struct samr_DomInfo1 min_password_length : 0x0000 (0) password_history_length : 0x0000 (0) password_properties : 0x00000000 (0) max_password_age : 0xffffde4000000000 (-37108517437440) min_password_age : 0x0000000000000000 (0) result : NT_STATUS_OK Testing SetDomainInfo level 1 samr_SetDomainInfo: struct samr_SetDomainInfo in: struct samr_SetDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0001 (1) info : * info : union samr_DomainInfo(case 1) info1: struct samr_DomInfo1 min_password_length : 0x0000 (0) password_history_length : 0x0000 (0) password_properties : 0x00000000 (0) max_password_age : 0xffffde4000000000 (-37108517437440) min_password_age : 0x0000000000000000 (0) samr_SetDomainInfo: struct samr_SetDomainInfo out: struct samr_SetDomainInfo result : NT_STATUS_INVALID_DOMAIN_ROLE SetDomainInfo level 1 failed - NT_STATUS_INVALID_DOMAIN_ROLE Testing QueryDomainInfo level 2 samr_QueryDomainInfo: struct samr_QueryDomainInfo in: struct samr_QueryDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0002 (2) samr_QueryDomainInfo: struct samr_QueryDomainInfo out: struct samr_QueryDomainInfo info : * info : union samr_DomainInfo(case 2) info2: struct samr_DomInfo2 force_logoff_time : Wed Jan 22 17:55:33 1975 EST comment: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' domain: struct samr_String length : 0x0010 (16) size : 0x0012 (18) string : * string : 'SPINDOM4' primary: struct samr_String length : 0x0010 (16) size : 0x0010 (16) string : * string : 'SPIN4PDC' sequence_num : 0x0000000000000010 (16) unknown2 : 0x00000001 (1) role : ROLE_DOMAIN_BDC (2) unknown3 : 0x00000001 (1) num_users : 0x00000003 (3) num_groups : 0x00000003 (3) num_aliases : 0x00000000 (0) result : NT_STATUS_OK Testing SetDomainInfo level 2 samr_SetDomainInfo: struct samr_SetDomainInfo in: struct samr_SetDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0002 (2) info : * info : union samr_DomainInfo(case 2) info2: struct samr_DomInfo2 force_logoff_time : Wed Jan 22 17:55:33 1975 EST comment: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' domain: struct samr_String length : 0x0010 (16) size : 0x0010 (16) string : * string : 'SPINDOM4' primary: struct samr_String length : 0x0010 (16) size : 0x0010 (16) string : * string : 'SPIN4PDC' sequence_num : 0x0000000000000010 (16) unknown2 : 0x00000001 (1) role : ROLE_DOMAIN_BDC (2) unknown3 : 0x00000001 (1) num_users : 0x00000003 (3) num_groups : 0x00000003 (3) num_aliases : 0x00000000 (0) samr_SetDomainInfo: struct samr_SetDomainInfo out: struct samr_SetDomainInfo result : NT_STATUS_INVALID_INFO_CLASS samr_QueryDomainInfo: struct samr_QueryDomainInfo in: struct samr_QueryDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0002 (2) samr_QueryDomainInfo: struct samr_QueryDomainInfo out: struct samr_QueryDomainInfo info : * info : union samr_DomainInfo(case 2) info2: struct samr_DomInfo2 force_logoff_time : Wed Jan 22 17:55:33 1975 EST comment: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' domain: struct samr_String length : 0x0010 (16) size : 0x0012 (18) string : * string : 'SPINDOM4' primary: struct samr_String length : 0x0010 (16) size : 0x0010 (16) string : * string : 'SPIN4PDC' sequence_num : 0x0000000000000010 (16) unknown2 : 0x00000001 (1) role : ROLE_DOMAIN_BDC (2) unknown3 : 0x00000001 (1) num_users : 0x00000003 (3) num_groups : 0x00000003 (3) num_aliases : 0x00000000 (0) result : NT_STATUS_OK Testing QueryDomainInfo level 3 samr_QueryDomainInfo: struct samr_QueryDomainInfo in: struct samr_QueryDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0003 (3) samr_QueryDomainInfo: struct samr_QueryDomainInfo out: struct samr_QueryDomainInfo info : * info : union samr_DomainInfo(case 3) info3: struct samr_DomInfo3 force_logoff_time : Wed Jan 22 17:55:33 1975 EST result : NT_STATUS_OK Testing SetDomainInfo level 3 samr_SetDomainInfo: struct samr_SetDomainInfo in: struct samr_SetDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0003 (3) info : * info : union samr_DomainInfo(case 3) info3: struct samr_DomInfo3 force_logoff_time : Wed Jan 22 17:55:33 1975 EST samr_SetDomainInfo: struct samr_SetDomainInfo out: struct samr_SetDomainInfo result : NT_STATUS_INVALID_DOMAIN_ROLE SetDomainInfo level 3 failed - NT_STATUS_INVALID_DOMAIN_ROLE Testing QueryDomainInfo level 4 samr_QueryDomainInfo: struct samr_QueryDomainInfo in: struct samr_QueryDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0004 (4) samr_QueryDomainInfo: struct samr_QueryDomainInfo out: struct samr_QueryDomainInfo info : * info : union samr_DomainInfo(case 4) info4: struct samr_DomInfo4 comment: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' result : NT_STATUS_OK Testing SetDomainInfo level 4 samr_SetDomainInfo: struct samr_SetDomainInfo in: struct samr_SetDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0004 (4) info : * info : union samr_DomainInfo(case 4) info4: struct samr_DomInfo4 comment: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' samr_SetDomainInfo: struct samr_SetDomainInfo out: struct samr_SetDomainInfo result : NT_STATUS_INVALID_DOMAIN_ROLE SetDomainInfo level 4 failed - NT_STATUS_INVALID_DOMAIN_ROLE Testing QueryDomainInfo level 5 samr_QueryDomainInfo: struct samr_QueryDomainInfo in: struct samr_QueryDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0005 (5) samr_QueryDomainInfo: struct samr_QueryDomainInfo out: struct samr_QueryDomainInfo info : * info : union samr_DomainInfo(case 5) info5: struct samr_DomInfo5 domain_name: struct samr_String length : 0x0010 (16) size : 0x0012 (18) string : * string : 'SPINDOM4' result : NT_STATUS_OK Testing SetDomainInfo level 5 samr_SetDomainInfo: struct samr_SetDomainInfo in: struct samr_SetDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0005 (5) info : * info : union samr_DomainInfo(case 5) info5: struct samr_DomInfo5 domain_name: struct samr_String length : 0x0010 (16) size : 0x0010 (16) string : * string : 'SPINDOM4' samr_SetDomainInfo: struct samr_SetDomainInfo out: struct samr_SetDomainInfo result : NT_STATUS_INVALID_INFO_CLASS samr_QueryDomainInfo: struct samr_QueryDomainInfo in: struct samr_QueryDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0005 (5) samr_QueryDomainInfo: struct samr_QueryDomainInfo out: struct samr_QueryDomainInfo info : * info : union samr_DomainInfo(case 5) info5: struct samr_DomInfo5 domain_name: struct samr_String length : 0x0010 (16) size : 0x0012 (18) string : * string : 'SPINDOM4' result : NT_STATUS_OK Testing QueryDomainInfo level 6 samr_QueryDomainInfo: struct samr_QueryDomainInfo in: struct samr_QueryDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0006 (6) samr_QueryDomainInfo: struct samr_QueryDomainInfo out: struct samr_QueryDomainInfo info : * info : union samr_DomainInfo(case 6) info6: struct samr_DomInfo6 primary: struct samr_String length : 0x0010 (16) size : 0x0010 (16) string : * string : 'SPIN4PDC' result : NT_STATUS_OK Testing SetDomainInfo level 6 samr_SetDomainInfo: struct samr_SetDomainInfo in: struct samr_SetDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0006 (6) info : * info : union samr_DomainInfo(case 6) info6: struct samr_DomInfo6 primary: struct samr_String length : 0x0010 (16) size : 0x0010 (16) string : * string : 'SPIN4PDC' samr_SetDomainInfo: struct samr_SetDomainInfo out: struct samr_SetDomainInfo result : NT_STATUS_INVALID_DOMAIN_ROLE SetDomainInfo level 6 failed - NT_STATUS_INVALID_DOMAIN_ROLE Testing QueryDomainInfo level 7 samr_QueryDomainInfo: struct samr_QueryDomainInfo in: struct samr_QueryDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0007 (7) samr_QueryDomainInfo: struct samr_QueryDomainInfo out: struct samr_QueryDomainInfo info : * info : union samr_DomainInfo(case 7) info7: struct samr_DomInfo7 role : UNKNOWN_ENUM_VALUE (1048578) result : NT_STATUS_OK Testing SetDomainInfo level 7 samr_SetDomainInfo: struct samr_SetDomainInfo in: struct samr_SetDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0007 (7) info : * info : union samr_DomainInfo(case 7) info7: struct samr_DomInfo7 role : UNKNOWN_ENUM_VALUE (1048578) samr_SetDomainInfo: struct samr_SetDomainInfo out: struct samr_SetDomainInfo result : NT_STATUS_OK samr_QueryDomainInfo: struct samr_QueryDomainInfo in: struct samr_QueryDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0007 (7) samr_QueryDomainInfo: struct samr_QueryDomainInfo out: struct samr_QueryDomainInfo info : * info : union samr_DomainInfo(case 7) info7: struct samr_DomInfo7 role : UNKNOWN_ENUM_VALUE (1048578) result : NT_STATUS_OK Testing QueryDomainInfo level 8 samr_QueryDomainInfo: struct samr_QueryDomainInfo in: struct samr_QueryDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0008 (8) samr_QueryDomainInfo: struct samr_QueryDomainInfo out: struct samr_QueryDomainInfo info : * info : union samr_DomainInfo(case 8) info8: struct samr_DomInfo8 sequence_num : 0x0000000000000010 domain_create_time : Sat Dec 13 02:10:29 2003 EST result : NT_STATUS_OK Testing SetDomainInfo level 8 samr_SetDomainInfo: struct samr_SetDomainInfo in: struct samr_SetDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0008 (8) info : * info : union samr_DomainInfo(case 8) info8: struct samr_DomInfo8 sequence_num : 0x0000000000000010 domain_create_time : Sat Dec 13 02:10:29 2003 EST samr_SetDomainInfo: struct samr_SetDomainInfo out: struct samr_SetDomainInfo result : NT_STATUS_INVALID_INFO_CLASS samr_QueryDomainInfo: struct samr_QueryDomainInfo in: struct samr_QueryDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0008 (8) samr_QueryDomainInfo: struct samr_QueryDomainInfo out: struct samr_QueryDomainInfo info : * info : union samr_DomainInfo(case 8) info8: struct samr_DomInfo8 sequence_num : 0x0000000000000010 domain_create_time : Sat Dec 13 02:10:29 2003 EST result : NT_STATUS_OK Testing QueryDomainInfo level 9 samr_QueryDomainInfo: struct samr_QueryDomainInfo in: struct samr_QueryDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0009 (9) samr_QueryDomainInfo: struct samr_QueryDomainInfo out: struct samr_QueryDomainInfo info : * info : union samr_DomainInfo(case 9) info9: struct samr_DomInfo9 unknown : 0x00000001 (1) result : NT_STATUS_OK Testing SetDomainInfo level 9 samr_SetDomainInfo: struct samr_SetDomainInfo in: struct samr_SetDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0009 (9) info : * info : union samr_DomainInfo(case 9) info9: struct samr_DomInfo9 unknown : 0x00000001 (1) samr_SetDomainInfo: struct samr_SetDomainInfo out: struct samr_SetDomainInfo result : NT_STATUS_INVALID_DOMAIN_ROLE SetDomainInfo level 9 failed - NT_STATUS_INVALID_DOMAIN_ROLE Testing QueryDomainInfo level 11 samr_QueryDomainInfo: struct samr_QueryDomainInfo in: struct samr_QueryDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x000b (11) samr_QueryDomainInfo: struct samr_QueryDomainInfo out: struct samr_QueryDomainInfo info : * info : union samr_DomainInfo(case 11) info11: struct samr_DomInfo11 info2: struct samr_DomInfo2 force_logoff_time : Wed Jan 22 17:55:33 1975 EST comment: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' domain: struct samr_String length : 0x0010 (16) size : 0x0012 (18) string : * string : 'SPINDOM4' primary: struct samr_String length : 0x0010 (16) size : 0x0010 (16) string : * string : 'SPIN4PDC' sequence_num : 0x0000000000000010 (16) unknown2 : 0x00000001 (1) role : ROLE_DOMAIN_BDC (2) unknown3 : 0x00000001 (1) num_users : 0x00000003 (3) num_groups : 0x00000003 (3) num_aliases : 0x00000000 (0) lockout_duration : 0xfffffffbcf1dcc00 lockout_window : 0xfffffffbcf1dcc00 lockout_threshold : 0x0000 (0) result : NT_STATUS_OK Testing SetDomainInfo level 11 samr_SetDomainInfo: struct samr_SetDomainInfo in: struct samr_SetDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x000b (11) info : * info : union samr_DomainInfo(case 11) info11: struct samr_DomInfo11 info2: struct samr_DomInfo2 force_logoff_time : Wed Jan 22 17:55:33 1975 EST comment: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' domain: struct samr_String length : 0x0010 (16) size : 0x0010 (16) string : * string : 'SPINDOM4' primary: struct samr_String length : 0x0010 (16) size : 0x0010 (16) string : * string : 'SPIN4PDC' sequence_num : 0x0000000000000010 (16) unknown2 : 0x00000001 (1) role : ROLE_DOMAIN_BDC (2) unknown3 : 0x00000001 (1) num_users : 0x00000003 (3) num_groups : 0x00000003 (3) num_aliases : 0x00000000 (0) lockout_duration : 0xfffffffbcf1dcc00 lockout_window : 0xfffffffbcf1dcc00 lockout_threshold : 0x0000 (0) samr_SetDomainInfo: struct samr_SetDomainInfo out: struct samr_SetDomainInfo result : NT_STATUS_INVALID_INFO_CLASS samr_QueryDomainInfo: struct samr_QueryDomainInfo in: struct samr_QueryDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x000b (11) samr_QueryDomainInfo: struct samr_QueryDomainInfo out: struct samr_QueryDomainInfo info : * info : union samr_DomainInfo(case 11) info11: struct samr_DomInfo11 info2: struct samr_DomInfo2 force_logoff_time : Wed Jan 22 17:55:33 1975 EST comment: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' domain: struct samr_String length : 0x0010 (16) size : 0x0012 (18) string : * string : 'SPINDOM4' primary: struct samr_String length : 0x0010 (16) size : 0x0010 (16) string : * string : 'SPIN4PDC' sequence_num : 0x0000000000000010 (16) unknown2 : 0x00000001 (1) role : ROLE_DOMAIN_BDC (2) unknown3 : 0x00000001 (1) num_users : 0x00000003 (3) num_groups : 0x00000003 (3) num_aliases : 0x00000000 (0) lockout_duration : 0xfffffffbcf1dcc00 lockout_window : 0xfffffffbcf1dcc00 lockout_threshold : 0x0000 (0) result : NT_STATUS_OK Testing QueryDomainInfo level 12 samr_QueryDomainInfo: struct samr_QueryDomainInfo in: struct samr_QueryDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x000c (12) samr_QueryDomainInfo: struct samr_QueryDomainInfo out: struct samr_QueryDomainInfo info : * info : union samr_DomainInfo(case 12) info12: struct samr_DomInfo12 lockout_duration : 0xfffffffbcf1dcc00 lockout_window : 0xfffffffbcf1dcc00 lockout_threshold : 0x0000 (0) result : NT_STATUS_OK Testing SetDomainInfo level 12 samr_SetDomainInfo: struct samr_SetDomainInfo in: struct samr_SetDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x000c (12) info : * info : union samr_DomainInfo(case 12) info12: struct samr_DomInfo12 lockout_duration : 0xfffffffbcf1dcc00 lockout_window : 0xfffffffbcf1dcc00 lockout_threshold : 0x0000 (0) samr_SetDomainInfo: struct samr_SetDomainInfo out: struct samr_SetDomainInfo result : NT_STATUS_INVALID_DOMAIN_ROLE SetDomainInfo level 12 failed - NT_STATUS_INVALID_DOMAIN_ROLE Testing QueryDomainInfo level 13 samr_QueryDomainInfo: struct samr_QueryDomainInfo in: struct samr_QueryDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x000d (13) samr_QueryDomainInfo: struct samr_QueryDomainInfo out: struct samr_QueryDomainInfo info : * info : union samr_DomainInfo(case 13) info13: struct samr_DomInfo13 sequence_num : 0x0000000000000010 domain_create_time : Sat Dec 13 02:10:29 2003 EST unknown1 : 0x00000000 (0) unknown2 : 0x00000000 (0) result : NT_STATUS_OK Testing SetDomainInfo level 13 samr_SetDomainInfo: struct samr_SetDomainInfo in: struct samr_SetDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x000d (13) info : * info : union samr_DomainInfo(case 13) info13: struct samr_DomInfo13 sequence_num : 0x0000000000000010 domain_create_time : Sat Dec 13 02:10:29 2003 EST unknown1 : 0x00000000 (0) unknown2 : 0x00000000 (0) samr_SetDomainInfo: struct samr_SetDomainInfo out: struct samr_SetDomainInfo result : NT_STATUS_INVALID_INFO_CLASS samr_QueryDomainInfo: struct samr_QueryDomainInfo in: struct samr_QueryDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x000d (13) samr_QueryDomainInfo: struct samr_QueryDomainInfo out: struct samr_QueryDomainInfo info : * info : union samr_DomainInfo(case 13) info13: struct samr_DomInfo13 sequence_num : 0x0000000000000010 domain_create_time : Sat Dec 13 02:10:29 2003 EST unknown1 : 0x00000000 (0) unknown2 : 0x00000000 (0) result : NT_STATUS_OK Testing QueryDomainInfo2 level 1 samr_QueryDomainInfo2: struct samr_QueryDomainInfo2 in: struct samr_QueryDomainInfo2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0001 (1) samr_QueryDomainInfo2: struct samr_QueryDomainInfo2 out: struct samr_QueryDomainInfo2 info : * info : union samr_DomainInfo(case 1) info1: struct samr_DomInfo1 min_password_length : 0x0000 (0) password_history_length : 0x0000 (0) password_properties : 0x00000000 (0) max_password_age : 0xffffde4000000000 (-37108517437440) min_password_age : 0x0000000000000000 (0) result : NT_STATUS_OK Testing QueryDomainInfo2 level 2 samr_QueryDomainInfo2: struct samr_QueryDomainInfo2 in: struct samr_QueryDomainInfo2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0002 (2) samr_QueryDomainInfo2: struct samr_QueryDomainInfo2 out: struct samr_QueryDomainInfo2 info : * info : union samr_DomainInfo(case 2) info2: struct samr_DomInfo2 force_logoff_time : Wed Jan 22 17:55:33 1975 EST comment: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' domain: struct samr_String length : 0x0010 (16) size : 0x0012 (18) string : * string : 'SPINDOM4' primary: struct samr_String length : 0x0010 (16) size : 0x0010 (16) string : * string : 'SPIN4PDC' sequence_num : 0x0000000000000010 (16) unknown2 : 0x00000001 (1) role : ROLE_DOMAIN_BDC (2) unknown3 : 0x00000001 (1) num_users : 0x00000003 (3) num_groups : 0x00000003 (3) num_aliases : 0x00000000 (0) result : NT_STATUS_OK Testing QueryDomainInfo2 level 3 samr_QueryDomainInfo2: struct samr_QueryDomainInfo2 in: struct samr_QueryDomainInfo2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0003 (3) samr_QueryDomainInfo2: struct samr_QueryDomainInfo2 out: struct samr_QueryDomainInfo2 info : * info : union samr_DomainInfo(case 3) info3: struct samr_DomInfo3 force_logoff_time : Wed Jan 22 17:55:33 1975 EST result : NT_STATUS_OK Testing QueryDomainInfo2 level 4 samr_QueryDomainInfo2: struct samr_QueryDomainInfo2 in: struct samr_QueryDomainInfo2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0004 (4) samr_QueryDomainInfo2: struct samr_QueryDomainInfo2 out: struct samr_QueryDomainInfo2 info : * info : union samr_DomainInfo(case 4) info4: struct samr_DomInfo4 comment: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' result : NT_STATUS_OK Testing QueryDomainInfo2 level 5 samr_QueryDomainInfo2: struct samr_QueryDomainInfo2 in: struct samr_QueryDomainInfo2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0005 (5) samr_QueryDomainInfo2: struct samr_QueryDomainInfo2 out: struct samr_QueryDomainInfo2 info : * info : union samr_DomainInfo(case 5) info5: struct samr_DomInfo5 domain_name: struct samr_String length : 0x0010 (16) size : 0x0012 (18) string : * string : 'SPINDOM4' result : NT_STATUS_OK Testing QueryDomainInfo2 level 6 samr_QueryDomainInfo2: struct samr_QueryDomainInfo2 in: struct samr_QueryDomainInfo2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0006 (6) samr_QueryDomainInfo2: struct samr_QueryDomainInfo2 out: struct samr_QueryDomainInfo2 info : * info : union samr_DomainInfo(case 6) info6: struct samr_DomInfo6 primary: struct samr_String length : 0x0010 (16) size : 0x0010 (16) string : * string : 'SPIN4PDC' result : NT_STATUS_OK Testing QueryDomainInfo2 level 7 samr_QueryDomainInfo2: struct samr_QueryDomainInfo2 in: struct samr_QueryDomainInfo2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0007 (7) samr_QueryDomainInfo2: struct samr_QueryDomainInfo2 out: struct samr_QueryDomainInfo2 info : * info : union samr_DomainInfo(case 7) info7: struct samr_DomInfo7 role : UNKNOWN_ENUM_VALUE (1048578) result : NT_STATUS_OK Testing QueryDomainInfo2 level 8 samr_QueryDomainInfo2: struct samr_QueryDomainInfo2 in: struct samr_QueryDomainInfo2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0008 (8) samr_QueryDomainInfo2: struct samr_QueryDomainInfo2 out: struct samr_QueryDomainInfo2 info : * info : union samr_DomainInfo(case 8) info8: struct samr_DomInfo8 sequence_num : 0x0000000000000010 domain_create_time : Sat Dec 13 02:10:29 2003 EST result : NT_STATUS_OK Testing QueryDomainInfo2 level 9 samr_QueryDomainInfo2: struct samr_QueryDomainInfo2 in: struct samr_QueryDomainInfo2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0009 (9) samr_QueryDomainInfo2: struct samr_QueryDomainInfo2 out: struct samr_QueryDomainInfo2 info : * info : union samr_DomainInfo(case 9) info9: struct samr_DomInfo9 unknown : 0x00000001 (1) result : NT_STATUS_OK Testing QueryDomainInfo2 level 11 samr_QueryDomainInfo2: struct samr_QueryDomainInfo2 in: struct samr_QueryDomainInfo2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x000b (11) samr_QueryDomainInfo2: struct samr_QueryDomainInfo2 out: struct samr_QueryDomainInfo2 info : * info : union samr_DomainInfo(case 11) info11: struct samr_DomInfo11 info2: struct samr_DomInfo2 force_logoff_time : Wed Jan 22 17:55:33 1975 EST comment: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' domain: struct samr_String length : 0x0010 (16) size : 0x0012 (18) string : * string : 'SPINDOM4' primary: struct samr_String length : 0x0010 (16) size : 0x0010 (16) string : * string : 'SPIN4PDC' sequence_num : 0x0000000000000010 (16) unknown2 : 0x00000001 (1) role : ROLE_DOMAIN_BDC (2) unknown3 : 0x00000001 (1) num_users : 0x00000003 (3) num_groups : 0x00000003 (3) num_aliases : 0x00000000 (0) lockout_duration : 0xfffffffbcf1dcc00 lockout_window : 0xfffffffbcf1dcc00 lockout_threshold : 0x0000 (0) result : NT_STATUS_OK Testing QueryDomainInfo2 level 12 samr_QueryDomainInfo2: struct samr_QueryDomainInfo2 in: struct samr_QueryDomainInfo2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x000c (12) samr_QueryDomainInfo2: struct samr_QueryDomainInfo2 out: struct samr_QueryDomainInfo2 info : * info : union samr_DomainInfo(case 12) info12: struct samr_DomInfo12 lockout_duration : 0xfffffffbcf1dcc00 lockout_window : 0xfffffffbcf1dcc00 lockout_threshold : 0x0000 (0) result : NT_STATUS_OK Testing QueryDomainInfo2 level 13 samr_QueryDomainInfo2: struct samr_QueryDomainInfo2 in: struct samr_QueryDomainInfo2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x000d (13) samr_QueryDomainInfo2: struct samr_QueryDomainInfo2 out: struct samr_QueryDomainInfo2 info : * info : union samr_DomainInfo(case 13) info13: struct samr_DomInfo13 sequence_num : 0x0000000000000010 domain_create_time : Sat Dec 13 02:10:29 2003 EST unknown1 : 0x00000000 (0) unknown2 : 0x00000000 (0) result : NT_STATUS_OK Testing EnumDomainUsers samr_EnumDomainUsers: struct samr_EnumDomainUsers in: struct samr_EnumDomainUsers domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f resume_handle : * resume_handle : 0x00000000 (0) acct_flags : 0x00000000 (0) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 0: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK max_size : 0xffffffff (4294967295) samr_EnumDomainUsers: struct samr_EnumDomainUsers out: struct samr_EnumDomainUsers resume_handle : * resume_handle : 0x00000003 (3) sam : * sam: struct samr_SamArray count : 0x00000003 (3) entries : * entries: ARRAY(3) [0]: struct samr_SamEntry idx : 0x000001f4 (500) name: struct samr_String length : 0x001a (26) size : 0x0020 (32) string : * string : 'Administrator' [1]: struct samr_SamEntry idx : 0x000001f5 (501) name: struct samr_String length : 0x000a (10) size : 0x0020 (32) string : * string : 'Guest' [2]: struct samr_SamEntry idx : 0x000003ea (1002) name: struct samr_String length : 0x0014 (20) size : 0x0020 (32) string : * string : 'SPIN4BDC1$' num_entries : 0x00000003 (3) result : NT_STATUS_OK Testing OpenUser(500) samr_OpenUser: struct samr_OpenUser in: struct samr_OpenUser domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f access_mask : 0x02000000 (33554432) rid : 0x000001f4 (500) samr_OpenUser: struct samr_OpenUser out: struct samr_OpenUser user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : a59a3774-fc61-4f8e-9c21-61c8a2d80b5c result : NT_STATUS_OK samr_QuerySecurity: struct samr_QuerySecurity in: struct samr_QuerySecurity handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : a59a3774-fc61-4f8e-9c21-61c8a2d80b5c sec_info : 0x00000007 (7) samr_QuerySecurity: struct samr_QuerySecurity out: struct samr_QuerySecurity sdbuf : * sdbuf: struct sec_desc_buf sd_size : 0x0000008c (140) sd : * sd: struct security_descriptor revision : SEC_DESC_REVISION_1 (1) type : 0x8004 (32772) 0: SEC_DESC_OWNER_DEFAULTED 0: SEC_DESC_GROUP_DEFAULTED 1: SEC_DESC_DACL_PRESENT 0: SEC_DESC_DACL_DEFAULTED 0: SEC_DESC_SACL_PRESENT 0: SEC_DESC_SACL_DEFAULTED 0: SEC_DESC_DACL_TRUSTED 0: SEC_DESC_SERVER_SECURITY 0: SEC_DESC_DACL_AUTO_INHERIT_REQ 0: SEC_DESC_SACL_AUTO_INHERIT_REQ 0: SEC_DESC_DACL_AUTO_INHERITED 0: SEC_DESC_SACL_AUTO_INHERITED 0: SEC_DESC_DACL_PROTECTED 0: SEC_DESC_SACL_PROTECTED 0: SEC_DESC_RM_CONTROL_VALID 1: SEC_DESC_SELF_RELATIVE owner_sid : * owner_sid : S-1-5-32-544 group_sid : * group_sid : S-1-5-32-544 sacl : * sacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0058 (88) num_aces : 0x00000003 (3) aces : * aces: ARRAY(3) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002035b (131931) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f07ff (985087) trustee : S-1-5-32-544 [2]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0024 (36) access_mask : 0x00020044 (131140) trustee : S-1-5-21-662975699-1857117334-953900138-500 dacl : * dacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0058 (88) num_aces : 0x00000003 (3) aces : * aces: ARRAY(3) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002035b (131931) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f07ff (985087) trustee : S-1-5-32-544 [2]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0024 (36) access_mask : 0x00020044 (131140) trustee : S-1-5-21-662975699-1857117334-953900138-500 result : NT_STATUS_OK samr_SetSecurity: struct samr_SetSecurity in: struct samr_SetSecurity handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : a59a3774-fc61-4f8e-9c21-61c8a2d80b5c sec_info : 0x00000007 (7) sdbuf : * sdbuf: struct sec_desc_buf sd_size : 0x000000e4 (228) sd : * sd: struct security_descriptor revision : SEC_DESC_REVISION_1 (1) type : 0x8004 (32772) 0: SEC_DESC_OWNER_DEFAULTED 0: SEC_DESC_GROUP_DEFAULTED 1: SEC_DESC_DACL_PRESENT 0: SEC_DESC_DACL_DEFAULTED 0: SEC_DESC_SACL_PRESENT 0: SEC_DESC_SACL_DEFAULTED 0: SEC_DESC_DACL_TRUSTED 0: SEC_DESC_SERVER_SECURITY 0: SEC_DESC_DACL_AUTO_INHERIT_REQ 0: SEC_DESC_SACL_AUTO_INHERIT_REQ 0: SEC_DESC_DACL_AUTO_INHERITED 0: SEC_DESC_SACL_AUTO_INHERITED 0: SEC_DESC_DACL_PROTECTED 0: SEC_DESC_SACL_PROTECTED 0: SEC_DESC_RM_CONTROL_VALID 1: SEC_DESC_SELF_RELATIVE owner_sid : * owner_sid : S-1-5-32-544 group_sid : * group_sid : S-1-5-32-544 sacl : * sacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0058 (88) num_aces : 0x00000003 (3) aces : * aces: ARRAY(3) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002035b (131931) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f07ff (985087) trustee : S-1-5-32-544 [2]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0024 (36) access_mask : 0x00020044 (131140) trustee : S-1-5-21-662975699-1857117334-953900138-500 dacl : * dacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0058 (88) num_aces : 0x00000003 (3) aces : * aces: ARRAY(3) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002035b (131931) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f07ff (985087) trustee : S-1-5-32-544 [2]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0024 (36) access_mask : 0x00020044 (131140) trustee : S-1-5-21-662975699-1857117334-953900138-500 samr_SetSecurity: struct samr_SetSecurity out: struct samr_SetSecurity result : NT_STATUS_OK samr_QuerySecurity: struct samr_QuerySecurity in: struct samr_QuerySecurity handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : a59a3774-fc61-4f8e-9c21-61c8a2d80b5c sec_info : 0x00000007 (7) samr_QuerySecurity: struct samr_QuerySecurity out: struct samr_QuerySecurity sdbuf : * sdbuf: struct sec_desc_buf sd_size : 0x0000008c (140) sd : * sd: struct security_descriptor revision : SEC_DESC_REVISION_1 (1) type : 0x8004 (32772) 0: SEC_DESC_OWNER_DEFAULTED 0: SEC_DESC_GROUP_DEFAULTED 1: SEC_DESC_DACL_PRESENT 0: SEC_DESC_DACL_DEFAULTED 0: SEC_DESC_SACL_PRESENT 0: SEC_DESC_SACL_DEFAULTED 0: SEC_DESC_DACL_TRUSTED 0: SEC_DESC_SERVER_SECURITY 0: SEC_DESC_DACL_AUTO_INHERIT_REQ 0: SEC_DESC_SACL_AUTO_INHERIT_REQ 0: SEC_DESC_DACL_AUTO_INHERITED 0: SEC_DESC_SACL_AUTO_INHERITED 0: SEC_DESC_DACL_PROTECTED 0: SEC_DESC_SACL_PROTECTED 0: SEC_DESC_RM_CONTROL_VALID 1: SEC_DESC_SELF_RELATIVE owner_sid : * owner_sid : S-1-5-32-544 group_sid : * group_sid : S-1-5-32-544 sacl : * sacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0058 (88) num_aces : 0x00000003 (3) aces : * aces: ARRAY(3) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002035b (131931) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f07ff (985087) trustee : S-1-5-32-544 [2]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0024 (36) access_mask : 0x00020044 (131140) trustee : S-1-5-21-662975699-1857117334-953900138-500 dacl : * dacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0058 (88) num_aces : 0x00000003 (3) aces : * aces: ARRAY(3) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002035b (131931) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f07ff (985087) trustee : S-1-5-32-544 [2]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0024 (36) access_mask : 0x00020044 (131140) trustee : S-1-5-21-662975699-1857117334-953900138-500 result : NT_STATUS_OK Testing QueryUserInfo level 1 samr_QueryUserInfo: struct samr_QueryUserInfo in: struct samr_QueryUserInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : a59a3774-fc61-4f8e-9c21-61c8a2d80b5c level : 0x0001 (1) samr_QueryUserInfo: struct samr_QueryUserInfo out: struct samr_QueryUserInfo info : * info : union samr_UserInfo(case 1) info1: struct samr_UserInfo1 account_name: struct samr_String length : 0x001a (26) size : 0x001a (26) string : * string : 'Administrator' full_name: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' primary_gid : 0x00000201 (513) description: struct samr_String length : 0x006c (108) size : 0x006c (108) string : * string : 'Built-in account for administering the computer/domain' comment: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' result : NT_STATUS_OK Testing QueryUserInfo level 2 samr_QueryUserInfo: struct samr_QueryUserInfo in: struct samr_QueryUserInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : a59a3774-fc61-4f8e-9c21-61c8a2d80b5c level : 0x0002 (2) samr_QueryUserInfo: struct samr_QueryUserInfo out: struct samr_QueryUserInfo info : * info : union samr_UserInfo(case 2) info2: struct samr_UserInfo2 comment: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' unknown: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : NULL country_code : 0x0000 (0) code_page : 0x0000 (0) result : NT_STATUS_OK Testing QueryUserInfo level 3 samr_QueryUserInfo: struct samr_QueryUserInfo in: struct samr_QueryUserInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : a59a3774-fc61-4f8e-9c21-61c8a2d80b5c level : 0x0003 (3) samr_QueryUserInfo: struct samr_QueryUserInfo out: struct samr_QueryUserInfo info : * info : union samr_UserInfo(case 3) info3: struct samr_UserInfo3 account_name: struct samr_String length : 0x001a (26) size : 0x001a (26) string : * string : 'Administrator' full_name: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' rid : 0x000001f4 (500) primary_gid : 0x00000201 (513) home_directory: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' home_drive: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' logon_script: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' profile_path: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' workstations: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' last_logon : Tue Jan 11 15:25:10 2005 EST last_logoff : Tue Jan 11 14:57:03 2005 EST last_password_change : Sat Dec 13 02:10:32 2003 EST allow_password_change : Sat Dec 13 02:10:32 2003 EST force_password_change : Wed Jan 22 17:55:33 1975 EST logon_hours: struct samr_LogonHours units_per_week : 0x00a8 (168) bits : * bits : ffffffffffffffffffffffffffffffffffffffffff bad_password_count : 0x0000 (0) logon_count : 0x0008 (8) acct_flags : 0x00000210 (528) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 1: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 0: ACB_SVRTRUST 1: ACB_PWNOEXP 0: ACB_AUTOLOCK result : NT_STATUS_OK Testing QueryUserInfo level 4 samr_QueryUserInfo: struct samr_QueryUserInfo in: struct samr_QueryUserInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : a59a3774-fc61-4f8e-9c21-61c8a2d80b5c level : 0x0004 (4) samr_QueryUserInfo: struct samr_QueryUserInfo out: struct samr_QueryUserInfo info : * info : union samr_UserInfo(case 4) info4: struct samr_UserInfo4 logon_hours: struct samr_LogonHours units_per_week : 0x00a8 (168) bits : * bits : ffffffffffffffffffffffffffffffffffffffffff result : NT_STATUS_OK Testing QueryUserInfo level 5 samr_QueryUserInfo: struct samr_QueryUserInfo in: struct samr_QueryUserInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : a59a3774-fc61-4f8e-9c21-61c8a2d80b5c level : 0x0005 (5) samr_QueryUserInfo: struct samr_QueryUserInfo out: struct samr_QueryUserInfo info : * info : union samr_UserInfo(case 5) info5: struct samr_UserInfo5 account_name: struct samr_String length : 0x001a (26) size : 0x001a (26) string : * string : 'Administrator' full_name: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' rid : 0x000001f4 (500) primary_gid : 0x00000201 (513) home_directory: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' home_drive: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' logon_script: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' profile_path: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' description: struct samr_String length : 0x006c (108) size : 0x006c (108) string : * string : 'Built-in account for administering the computer/domain' workstations: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' last_logon : Tue Jan 11 15:25:10 2005 EST last_logoff : Tue Jan 11 14:57:03 2005 EST logon_hours: struct samr_LogonHours units_per_week : 0x00a8 (168) bits : * bits : ffffffffffffffffffffffffffffffffffffffffff bad_password_count : 0x0000 (0) logon_count : 0x0008 (8) last_password_change : Sat Dec 13 02:10:32 2003 EST acct_expiry : Wed Jan 22 17:55:33 1975 EST acct_flags : 0x00000210 (528) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 1: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 0: ACB_SVRTRUST 1: ACB_PWNOEXP 0: ACB_AUTOLOCK result : NT_STATUS_OK Testing QueryUserInfo level 6 samr_QueryUserInfo: struct samr_QueryUserInfo in: struct samr_QueryUserInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : a59a3774-fc61-4f8e-9c21-61c8a2d80b5c level : 0x0006 (6) samr_QueryUserInfo: struct samr_QueryUserInfo out: struct samr_QueryUserInfo info : * info : union samr_UserInfo(case 6) info6: struct samr_UserInfo6 account_name: struct samr_String length : 0x001a (26) size : 0x001a (26) string : * string : 'Administrator' full_name: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' result : NT_STATUS_OK Testing QueryUserInfo level 7 samr_QueryUserInfo: struct samr_QueryUserInfo in: struct samr_QueryUserInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : a59a3774-fc61-4f8e-9c21-61c8a2d80b5c level : 0x0007 (7) samr_QueryUserInfo: struct samr_QueryUserInfo out: struct samr_QueryUserInfo info : * info : union samr_UserInfo(case 7) info7: struct samr_UserInfo7 account_name: struct samr_String length : 0x001a (26) size : 0x001a (26) string : * string : 'Administrator' result : NT_STATUS_OK Testing QueryUserInfo level 8 samr_QueryUserInfo: struct samr_QueryUserInfo in: struct samr_QueryUserInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : a59a3774-fc61-4f8e-9c21-61c8a2d80b5c level : 0x0008 (8) samr_QueryUserInfo: struct samr_QueryUserInfo out: struct samr_QueryUserInfo info : * info : union samr_UserInfo(case 8) info8: struct samr_UserInfo8 full_name: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' result : NT_STATUS_OK Testing QueryUserInfo level 9 samr_QueryUserInfo: struct samr_QueryUserInfo in: struct samr_QueryUserInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : a59a3774-fc61-4f8e-9c21-61c8a2d80b5c level : 0x0009 (9) samr_QueryUserInfo: struct samr_QueryUserInfo out: struct samr_QueryUserInfo info : * info : union samr_UserInfo(case 9) info9: struct samr_UserInfo9 primary_gid : 0x00000201 (513) result : NT_STATUS_OK Testing QueryUserInfo level 10 samr_QueryUserInfo: struct samr_QueryUserInfo in: struct samr_QueryUserInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : a59a3774-fc61-4f8e-9c21-61c8a2d80b5c level : 0x000a (10) samr_QueryUserInfo: struct samr_QueryUserInfo out: struct samr_QueryUserInfo info : * info : union samr_UserInfo(case 10) info10: struct samr_UserInfo10 home_directory: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' home_drive: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' result : NT_STATUS_OK Testing QueryUserInfo level 11 samr_QueryUserInfo: struct samr_QueryUserInfo in: struct samr_QueryUserInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : a59a3774-fc61-4f8e-9c21-61c8a2d80b5c level : 0x000b (11) samr_QueryUserInfo: struct samr_QueryUserInfo out: struct samr_QueryUserInfo info : * info : union samr_UserInfo(case 11) info11: struct samr_UserInfo11 logon_script: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' result : NT_STATUS_OK Testing QueryUserInfo level 12 samr_QueryUserInfo: struct samr_QueryUserInfo in: struct samr_QueryUserInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : a59a3774-fc61-4f8e-9c21-61c8a2d80b5c level : 0x000c (12) samr_QueryUserInfo: struct samr_QueryUserInfo out: struct samr_QueryUserInfo info : * info : union samr_UserInfo(case 12) info12: struct samr_UserInfo12 profile_path: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' result : NT_STATUS_OK Testing QueryUserInfo level 13 samr_QueryUserInfo: struct samr_QueryUserInfo in: struct samr_QueryUserInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : a59a3774-fc61-4f8e-9c21-61c8a2d80b5c level : 0x000d (13) samr_QueryUserInfo: struct samr_QueryUserInfo out: struct samr_QueryUserInfo info : * info : union samr_UserInfo(case 13) info13: struct samr_UserInfo13 description: struct samr_String length : 0x006c (108) size : 0x006c (108) string : * string : 'Built-in account for administering the computer/domain' result : NT_STATUS_OK Testing QueryUserInfo level 14 samr_QueryUserInfo: struct samr_QueryUserInfo in: struct samr_QueryUserInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : a59a3774-fc61-4f8e-9c21-61c8a2d80b5c level : 0x000e (14) samr_QueryUserInfo: struct samr_QueryUserInfo out: struct samr_QueryUserInfo info : * info : union samr_UserInfo(case 14) info14: struct samr_UserInfo14 workstations: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' result : NT_STATUS_OK Testing QueryUserInfo level 16 samr_QueryUserInfo: struct samr_QueryUserInfo in: struct samr_QueryUserInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : a59a3774-fc61-4f8e-9c21-61c8a2d80b5c level : 0x0010 (16) samr_QueryUserInfo: struct samr_QueryUserInfo out: struct samr_QueryUserInfo info : * info : union samr_UserInfo(case 16) info16: struct samr_UserInfo16 acct_flags : 0x00000210 (528) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 1: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 0: ACB_SVRTRUST 1: ACB_PWNOEXP 0: ACB_AUTOLOCK result : NT_STATUS_OK Testing QueryUserInfo level 17 samr_QueryUserInfo: struct samr_QueryUserInfo in: struct samr_QueryUserInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : a59a3774-fc61-4f8e-9c21-61c8a2d80b5c level : 0x0011 (17) samr_QueryUserInfo: struct samr_QueryUserInfo out: struct samr_QueryUserInfo info : * info : union samr_UserInfo(case 17) info17: struct samr_UserInfo17 acct_expiry : Wed Jan 22 17:55:33 1975 EST result : NT_STATUS_OK Testing QueryUserInfo level 20 samr_QueryUserInfo: struct samr_QueryUserInfo in: struct samr_QueryUserInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : a59a3774-fc61-4f8e-9c21-61c8a2d80b5c level : 0x0014 (20) samr_QueryUserInfo: struct samr_QueryUserInfo out: struct samr_QueryUserInfo info : * info : union samr_UserInfo(case 20) info20: struct samr_UserInfo20 parameters: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' result : NT_STATUS_OK Testing QueryUserInfo level 21 samr_QueryUserInfo: struct samr_QueryUserInfo in: struct samr_QueryUserInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : a59a3774-fc61-4f8e-9c21-61c8a2d80b5c level : 0x0015 (21) samr_QueryUserInfo: struct samr_QueryUserInfo out: struct samr_QueryUserInfo info : * info : union samr_UserInfo(case 21) info21: struct samr_UserInfo21 last_logon : Tue Jan 11 15:25:10 2005 EST last_logoff : Tue Jan 11 14:57:03 2005 EST last_password_change : Sat Dec 13 02:10:32 2003 EST acct_expiry : Wed Jan 22 17:55:33 1975 EST allow_password_change : Sat Dec 13 02:10:32 2003 EST force_password_change : Wed Jan 22 17:55:33 1975 EST account_name: struct samr_String length : 0x001a (26) size : 0x001a (26) string : * string : 'Administrator' full_name: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' home_directory: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' home_drive: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' logon_script: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' profile_path: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' description: struct samr_String length : 0x006c (108) size : 0x006c (108) string : * string : 'Built-in account for administering the computer/domain' workstations: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' comment: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' parameters: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' unknown1: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : NULL unknown2: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : NULL unknown3: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : NULL buf_count : 0x00000000 (0) buffer : NULL rid : 0x000001f4 (500) primary_gid : 0x00000201 (513) acct_flags : 0x00000210 (528) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 1: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 0: ACB_SVRTRUST 1: ACB_PWNOEXP 0: ACB_AUTOLOCK fields_present : 0x00ffffff (16777215) 1: SAMR_FIELD_NAME 1: SAMR_FIELD_DESCRIPTION 1: SAMR_FIELD_COMMENT 1: SAMR_FIELD_LOGON_SCRIPT 1: SAMR_FIELD_PROFILE_PATH 1: SAMR_FIELD_WORKSTATION 1: SAMR_FIELD_LOGON_HOURS 1: SAMR_FIELD_ACCT_FLAGS 1: SAMR_FIELD_PARAMETERS 1: SAMR_FIELD_COUNTRY_CODE 1: SAMR_FIELD_CODE_PAGE 0: SAMR_FIELD_PASSWORD 0: SAMR_FIELD_PASSWORD2 logon_hours: struct samr_LogonHours units_per_week : 0x00a8 (168) bits : * bits : ffffffffffffffffffffffffffffffffffffffffff bad_password_count : 0x0000 (0) logon_count : 0x0008 (8) country_code : 0x0000 (0) code_page : 0x0000 (0) nt_password_set : 0x00 (0) lm_password_set : 0x00 (0) password_expired : 0x00 (0) unknown4 : 0x00 (0) result : NT_STATUS_OK Testing QueryUserInfo2 level 1 samr_QueryUserInfo2: struct samr_QueryUserInfo2 in: struct samr_QueryUserInfo2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : a59a3774-fc61-4f8e-9c21-61c8a2d80b5c level : 0x0001 (1) samr_QueryUserInfo2: struct samr_QueryUserInfo2 out: struct samr_QueryUserInfo2 info : * info : union samr_UserInfo(case 1) info1: struct samr_UserInfo1 account_name: struct samr_String length : 0x001a (26) size : 0x001a (26) string : * string : 'Administrator' full_name: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' primary_gid : 0x00000201 (513) description: struct samr_String length : 0x006c (108) size : 0x006c (108) string : * string : 'Built-in account for administering the computer/domain' comment: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' result : NT_STATUS_OK Testing QueryUserInfo2 level 2 samr_QueryUserInfo2: struct samr_QueryUserInfo2 in: struct samr_QueryUserInfo2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : a59a3774-fc61-4f8e-9c21-61c8a2d80b5c level : 0x0002 (2) samr_QueryUserInfo2: struct samr_QueryUserInfo2 out: struct samr_QueryUserInfo2 info : * info : union samr_UserInfo(case 2) info2: struct samr_UserInfo2 comment: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' unknown: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : NULL country_code : 0x0000 (0) code_page : 0x0000 (0) result : NT_STATUS_OK Testing QueryUserInfo2 level 3 samr_QueryUserInfo2: struct samr_QueryUserInfo2 in: struct samr_QueryUserInfo2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : a59a3774-fc61-4f8e-9c21-61c8a2d80b5c level : 0x0003 (3) samr_QueryUserInfo2: struct samr_QueryUserInfo2 out: struct samr_QueryUserInfo2 info : * info : union samr_UserInfo(case 3) info3: struct samr_UserInfo3 account_name: struct samr_String length : 0x001a (26) size : 0x001a (26) string : * string : 'Administrator' full_name: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' rid : 0x000001f4 (500) primary_gid : 0x00000201 (513) home_directory: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' home_drive: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' logon_script: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' profile_path: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' workstations: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' last_logon : Tue Jan 11 15:25:10 2005 EST last_logoff : Tue Jan 11 14:57:03 2005 EST last_password_change : Sat Dec 13 02:10:32 2003 EST allow_password_change : Sat Dec 13 02:10:32 2003 EST force_password_change : Wed Jan 22 17:55:33 1975 EST logon_hours: struct samr_LogonHours units_per_week : 0x00a8 (168) bits : * bits : ffffffffffffffffffffffffffffffffffffffffff bad_password_count : 0x0000 (0) logon_count : 0x0008 (8) acct_flags : 0x00000210 (528) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 1: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 0: ACB_SVRTRUST 1: ACB_PWNOEXP 0: ACB_AUTOLOCK result : NT_STATUS_OK Testing QueryUserInfo2 level 4 samr_QueryUserInfo2: struct samr_QueryUserInfo2 in: struct samr_QueryUserInfo2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : a59a3774-fc61-4f8e-9c21-61c8a2d80b5c level : 0x0004 (4) samr_QueryUserInfo2: struct samr_QueryUserInfo2 out: struct samr_QueryUserInfo2 info : * info : union samr_UserInfo(case 4) info4: struct samr_UserInfo4 logon_hours: struct samr_LogonHours units_per_week : 0x00a8 (168) bits : * bits : ffffffffffffffffffffffffffffffffffffffffff result : NT_STATUS_OK Testing QueryUserInfo2 level 5 samr_QueryUserInfo2: struct samr_QueryUserInfo2 in: struct samr_QueryUserInfo2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : a59a3774-fc61-4f8e-9c21-61c8a2d80b5c level : 0x0005 (5) samr_QueryUserInfo2: struct samr_QueryUserInfo2 out: struct samr_QueryUserInfo2 info : * info : union samr_UserInfo(case 5) info5: struct samr_UserInfo5 account_name: struct samr_String length : 0x001a (26) size : 0x001a (26) string : * string : 'Administrator' full_name: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' rid : 0x000001f4 (500) primary_gid : 0x00000201 (513) home_directory: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' home_drive: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' logon_script: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' profile_path: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' description: struct samr_String length : 0x006c (108) size : 0x006c (108) string : * string : 'Built-in account for administering the computer/domain' workstations: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' last_logon : Tue Jan 11 15:25:10 2005 EST last_logoff : Tue Jan 11 14:57:03 2005 EST logon_hours: struct samr_LogonHours units_per_week : 0x00a8 (168) bits : * bits : ffffffffffffffffffffffffffffffffffffffffff bad_password_count : 0x0000 (0) logon_count : 0x0008 (8) last_password_change : Sat Dec 13 02:10:32 2003 EST acct_expiry : Wed Jan 22 17:55:33 1975 EST acct_flags : 0x00000210 (528) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 1: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 0: ACB_SVRTRUST 1: ACB_PWNOEXP 0: ACB_AUTOLOCK result : NT_STATUS_OK Testing QueryUserInfo2 level 6 samr_QueryUserInfo2: struct samr_QueryUserInfo2 in: struct samr_QueryUserInfo2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : a59a3774-fc61-4f8e-9c21-61c8a2d80b5c level : 0x0006 (6) samr_QueryUserInfo2: struct samr_QueryUserInfo2 out: struct samr_QueryUserInfo2 info : * info : union samr_UserInfo(case 6) info6: struct samr_UserInfo6 account_name: struct samr_String length : 0x001a (26) size : 0x001a (26) string : * string : 'Administrator' full_name: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' result : NT_STATUS_OK Testing QueryUserInfo2 level 7 samr_QueryUserInfo2: struct samr_QueryUserInfo2 in: struct samr_QueryUserInfo2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : a59a3774-fc61-4f8e-9c21-61c8a2d80b5c level : 0x0007 (7) samr_QueryUserInfo2: struct samr_QueryUserInfo2 out: struct samr_QueryUserInfo2 info : * info : union samr_UserInfo(case 7) info7: struct samr_UserInfo7 account_name: struct samr_String length : 0x001a (26) size : 0x001a (26) string : * string : 'Administrator' result : NT_STATUS_OK Testing QueryUserInfo2 level 8 samr_QueryUserInfo2: struct samr_QueryUserInfo2 in: struct samr_QueryUserInfo2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : a59a3774-fc61-4f8e-9c21-61c8a2d80b5c level : 0x0008 (8) samr_QueryUserInfo2: struct samr_QueryUserInfo2 out: struct samr_QueryUserInfo2 info : * info : union samr_UserInfo(case 8) info8: struct samr_UserInfo8 full_name: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' result : NT_STATUS_OK Testing QueryUserInfo2 level 9 samr_QueryUserInfo2: struct samr_QueryUserInfo2 in: struct samr_QueryUserInfo2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : a59a3774-fc61-4f8e-9c21-61c8a2d80b5c level : 0x0009 (9) samr_QueryUserInfo2: struct samr_QueryUserInfo2 out: struct samr_QueryUserInfo2 info : * info : union samr_UserInfo(case 9) info9: struct samr_UserInfo9 primary_gid : 0x00000201 (513) result : NT_STATUS_OK Testing QueryUserInfo2 level 10 samr_QueryUserInfo2: struct samr_QueryUserInfo2 in: struct samr_QueryUserInfo2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : a59a3774-fc61-4f8e-9c21-61c8a2d80b5c level : 0x000a (10) samr_QueryUserInfo2: struct samr_QueryUserInfo2 out: struct samr_QueryUserInfo2 info : * info : union samr_UserInfo(case 10) info10: struct samr_UserInfo10 home_directory: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' home_drive: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' result : NT_STATUS_OK Testing QueryUserInfo2 level 11 samr_QueryUserInfo2: struct samr_QueryUserInfo2 in: struct samr_QueryUserInfo2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : a59a3774-fc61-4f8e-9c21-61c8a2d80b5c level : 0x000b (11) samr_QueryUserInfo2: struct samr_QueryUserInfo2 out: struct samr_QueryUserInfo2 info : * info : union samr_UserInfo(case 11) info11: struct samr_UserInfo11 logon_script: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' result : NT_STATUS_OK Testing QueryUserInfo2 level 12 samr_QueryUserInfo2: struct samr_QueryUserInfo2 in: struct samr_QueryUserInfo2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : a59a3774-fc61-4f8e-9c21-61c8a2d80b5c level : 0x000c (12) samr_QueryUserInfo2: struct samr_QueryUserInfo2 out: struct samr_QueryUserInfo2 info : * info : union samr_UserInfo(case 12) info12: struct samr_UserInfo12 profile_path: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' result : NT_STATUS_OK Testing QueryUserInfo2 level 13 samr_QueryUserInfo2: struct samr_QueryUserInfo2 in: struct samr_QueryUserInfo2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : a59a3774-fc61-4f8e-9c21-61c8a2d80b5c level : 0x000d (13) samr_QueryUserInfo2: struct samr_QueryUserInfo2 out: struct samr_QueryUserInfo2 info : * info : union samr_UserInfo(case 13) info13: struct samr_UserInfo13 description: struct samr_String length : 0x006c (108) size : 0x006c (108) string : * string : 'Built-in account for administering the computer/domain' result : NT_STATUS_OK Testing QueryUserInfo2 level 14 samr_QueryUserInfo2: struct samr_QueryUserInfo2 in: struct samr_QueryUserInfo2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : a59a3774-fc61-4f8e-9c21-61c8a2d80b5c level : 0x000e (14) samr_QueryUserInfo2: struct samr_QueryUserInfo2 out: struct samr_QueryUserInfo2 info : * info : union samr_UserInfo(case 14) info14: struct samr_UserInfo14 workstations: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' result : NT_STATUS_OK Testing QueryUserInfo2 level 16 samr_QueryUserInfo2: struct samr_QueryUserInfo2 in: struct samr_QueryUserInfo2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : a59a3774-fc61-4f8e-9c21-61c8a2d80b5c level : 0x0010 (16) samr_QueryUserInfo2: struct samr_QueryUserInfo2 out: struct samr_QueryUserInfo2 info : * info : union samr_UserInfo(case 16) info16: struct samr_UserInfo16 acct_flags : 0x00000210 (528) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 1: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 0: ACB_SVRTRUST 1: ACB_PWNOEXP 0: ACB_AUTOLOCK result : NT_STATUS_OK Testing QueryUserInfo2 level 17 samr_QueryUserInfo2: struct samr_QueryUserInfo2 in: struct samr_QueryUserInfo2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : a59a3774-fc61-4f8e-9c21-61c8a2d80b5c level : 0x0011 (17) samr_QueryUserInfo2: struct samr_QueryUserInfo2 out: struct samr_QueryUserInfo2 info : * info : union samr_UserInfo(case 17) info17: struct samr_UserInfo17 acct_expiry : Wed Jan 22 17:55:33 1975 EST result : NT_STATUS_OK Testing QueryUserInfo2 level 20 samr_QueryUserInfo2: struct samr_QueryUserInfo2 in: struct samr_QueryUserInfo2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : a59a3774-fc61-4f8e-9c21-61c8a2d80b5c level : 0x0014 (20) samr_QueryUserInfo2: struct samr_QueryUserInfo2 out: struct samr_QueryUserInfo2 info : * info : union samr_UserInfo(case 20) info20: struct samr_UserInfo20 parameters: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' result : NT_STATUS_OK Testing QueryUserInfo2 level 21 samr_QueryUserInfo2: struct samr_QueryUserInfo2 in: struct samr_QueryUserInfo2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : a59a3774-fc61-4f8e-9c21-61c8a2d80b5c level : 0x0015 (21) samr_QueryUserInfo2: struct samr_QueryUserInfo2 out: struct samr_QueryUserInfo2 info : * info : union samr_UserInfo(case 21) info21: struct samr_UserInfo21 last_logon : Tue Jan 11 15:25:10 2005 EST last_logoff : Tue Jan 11 14:57:03 2005 EST last_password_change : Sat Dec 13 02:10:32 2003 EST acct_expiry : Wed Jan 22 17:55:33 1975 EST allow_password_change : Sat Dec 13 02:10:32 2003 EST force_password_change : Wed Jan 22 17:55:33 1975 EST account_name: struct samr_String length : 0x001a (26) size : 0x001a (26) string : * string : 'Administrator' full_name: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' home_directory: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' home_drive: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' logon_script: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' profile_path: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' description: struct samr_String length : 0x006c (108) size : 0x006c (108) string : * string : 'Built-in account for administering the computer/domain' workstations: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' comment: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' parameters: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' unknown1: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : NULL unknown2: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : NULL unknown3: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : NULL buf_count : 0x00000000 (0) buffer : NULL rid : 0x000001f4 (500) primary_gid : 0x00000201 (513) acct_flags : 0x00000210 (528) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 1: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 0: ACB_SVRTRUST 1: ACB_PWNOEXP 0: ACB_AUTOLOCK fields_present : 0x00ffffff (16777215) 1: SAMR_FIELD_NAME 1: SAMR_FIELD_DESCRIPTION 1: SAMR_FIELD_COMMENT 1: SAMR_FIELD_LOGON_SCRIPT 1: SAMR_FIELD_PROFILE_PATH 1: SAMR_FIELD_WORKSTATION 1: SAMR_FIELD_LOGON_HOURS 1: SAMR_FIELD_ACCT_FLAGS 1: SAMR_FIELD_PARAMETERS 1: SAMR_FIELD_COUNTRY_CODE 1: SAMR_FIELD_CODE_PAGE 0: SAMR_FIELD_PASSWORD 0: SAMR_FIELD_PASSWORD2 logon_hours: struct samr_LogonHours units_per_week : 0x00a8 (168) bits : * bits : ffffffffffffffffffffffffffffffffffffffffff bad_password_count : 0x0000 (0) logon_count : 0x0008 (8) country_code : 0x0000 (0) code_page : 0x0000 (0) nt_password_set : 0x00 (0) lm_password_set : 0x00 (0) password_expired : 0x00 (0) unknown4 : 0x00 (0) result : NT_STATUS_OK Testing GetUserPwInfo samr_GetUserPwInfo: struct samr_GetUserPwInfo in: struct samr_GetUserPwInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : a59a3774-fc61-4f8e-9c21-61c8a2d80b5c samr_GetUserPwInfo: struct samr_GetUserPwInfo out: struct samr_GetUserPwInfo info: struct samr_PwInfo min_password_length : 0x0000 (0) password_properties : 0x00000000 (0) result : NT_STATUS_OK testing GetGroupsForUser samr_GetGroupsForUser: struct samr_GetGroupsForUser in: struct samr_GetGroupsForUser user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : a59a3774-fc61-4f8e-9c21-61c8a2d80b5c samr_GetGroupsForUser: struct samr_GetGroupsForUser out: struct samr_GetGroupsForUser rids : * rids: struct samr_RidArray count : 0x00000002 (2) rid : * rid: ARRAY(2) [0]: struct samr_RidType rid : 0x00000201 (513) type : 0x00000007 (7) [1]: struct samr_RidType rid : 0x00000200 (512) type : 0x00000007 (7) result : NT_STATUS_OK samr_Close: struct samr_Close in: struct samr_Close handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : a59a3774-fc61-4f8e-9c21-61c8a2d80b5c samr_Close: struct samr_Close out: struct samr_Close handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : NT_STATUS_OK Testing OpenUser(501) samr_OpenUser: struct samr_OpenUser in: struct samr_OpenUser domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f access_mask : 0x02000000 (33554432) rid : 0x000001f5 (501) samr_OpenUser: struct samr_OpenUser out: struct samr_OpenUser user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : feceeaf8-446c-410d-b9e6-082877144adc result : NT_STATUS_OK samr_QuerySecurity: struct samr_QuerySecurity in: struct samr_QuerySecurity handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : feceeaf8-446c-410d-b9e6-082877144adc sec_info : 0x00000007 (7) samr_QuerySecurity: struct samr_QuerySecurity out: struct samr_QuerySecurity sdbuf : * sdbuf: struct sec_desc_buf sd_size : 0x00000080 (128) sd : * sd: struct security_descriptor revision : SEC_DESC_REVISION_1 (1) type : 0x8004 (32772) 0: SEC_DESC_OWNER_DEFAULTED 0: SEC_DESC_GROUP_DEFAULTED 1: SEC_DESC_DACL_PRESENT 0: SEC_DESC_DACL_DEFAULTED 0: SEC_DESC_SACL_PRESENT 0: SEC_DESC_SACL_DEFAULTED 0: SEC_DESC_DACL_TRUSTED 0: SEC_DESC_SERVER_SECURITY 0: SEC_DESC_DACL_AUTO_INHERIT_REQ 0: SEC_DESC_SACL_AUTO_INHERIT_REQ 0: SEC_DESC_DACL_AUTO_INHERITED 0: SEC_DESC_SACL_AUTO_INHERITED 0: SEC_DESC_DACL_PROTECTED 0: SEC_DESC_SACL_PROTECTED 0: SEC_DESC_RM_CONTROL_VALID 1: SEC_DESC_SELF_RELATIVE owner_sid : * owner_sid : S-1-5-32-544 group_sid : * group_sid : S-1-5-32-544 sacl : * sacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x004c (76) num_aces : 0x00000003 (3) aces : * aces: ARRAY(3) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002031b (131867) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f07ff (985087) trustee : S-1-5-32-544 [2]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f07ff (985087) trustee : S-1-5-32-548 dacl : * dacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x004c (76) num_aces : 0x00000003 (3) aces : * aces: ARRAY(3) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002031b (131867) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f07ff (985087) trustee : S-1-5-32-544 [2]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f07ff (985087) trustee : S-1-5-32-548 result : NT_STATUS_OK samr_SetSecurity: struct samr_SetSecurity in: struct samr_SetSecurity handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : feceeaf8-446c-410d-b9e6-082877144adc sec_info : 0x00000007 (7) sdbuf : * sdbuf: struct sec_desc_buf sd_size : 0x000000cc (204) sd : * sd: struct security_descriptor revision : SEC_DESC_REVISION_1 (1) type : 0x8004 (32772) 0: SEC_DESC_OWNER_DEFAULTED 0: SEC_DESC_GROUP_DEFAULTED 1: SEC_DESC_DACL_PRESENT 0: SEC_DESC_DACL_DEFAULTED 0: SEC_DESC_SACL_PRESENT 0: SEC_DESC_SACL_DEFAULTED 0: SEC_DESC_DACL_TRUSTED 0: SEC_DESC_SERVER_SECURITY 0: SEC_DESC_DACL_AUTO_INHERIT_REQ 0: SEC_DESC_SACL_AUTO_INHERIT_REQ 0: SEC_DESC_DACL_AUTO_INHERITED 0: SEC_DESC_SACL_AUTO_INHERITED 0: SEC_DESC_DACL_PROTECTED 0: SEC_DESC_SACL_PROTECTED 0: SEC_DESC_RM_CONTROL_VALID 1: SEC_DESC_SELF_RELATIVE owner_sid : * owner_sid : S-1-5-32-544 group_sid : * group_sid : S-1-5-32-544 sacl : * sacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x004c (76) num_aces : 0x00000003 (3) aces : * aces: ARRAY(3) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002031b (131867) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f07ff (985087) trustee : S-1-5-32-544 [2]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f07ff (985087) trustee : S-1-5-32-548 dacl : * dacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x004c (76) num_aces : 0x00000003 (3) aces : * aces: ARRAY(3) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002031b (131867) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f07ff (985087) trustee : S-1-5-32-544 [2]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f07ff (985087) trustee : S-1-5-32-548 samr_SetSecurity: struct samr_SetSecurity out: struct samr_SetSecurity result : NT_STATUS_OK samr_QuerySecurity: struct samr_QuerySecurity in: struct samr_QuerySecurity handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : feceeaf8-446c-410d-b9e6-082877144adc sec_info : 0x00000007 (7) samr_QuerySecurity: struct samr_QuerySecurity out: struct samr_QuerySecurity sdbuf : * sdbuf: struct sec_desc_buf sd_size : 0x00000080 (128) sd : * sd: struct security_descriptor revision : SEC_DESC_REVISION_1 (1) type : 0x8004 (32772) 0: SEC_DESC_OWNER_DEFAULTED 0: SEC_DESC_GROUP_DEFAULTED 1: SEC_DESC_DACL_PRESENT 0: SEC_DESC_DACL_DEFAULTED 0: SEC_DESC_SACL_PRESENT 0: SEC_DESC_SACL_DEFAULTED 0: SEC_DESC_DACL_TRUSTED 0: SEC_DESC_SERVER_SECURITY 0: SEC_DESC_DACL_AUTO_INHERIT_REQ 0: SEC_DESC_SACL_AUTO_INHERIT_REQ 0: SEC_DESC_DACL_AUTO_INHERITED 0: SEC_DESC_SACL_AUTO_INHERITED 0: SEC_DESC_DACL_PROTECTED 0: SEC_DESC_SACL_PROTECTED 0: SEC_DESC_RM_CONTROL_VALID 1: SEC_DESC_SELF_RELATIVE owner_sid : * owner_sid : S-1-5-32-544 group_sid : * group_sid : S-1-5-32-544 sacl : * sacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x004c (76) num_aces : 0x00000003 (3) aces : * aces: ARRAY(3) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002031b (131867) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f07ff (985087) trustee : S-1-5-32-544 [2]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f07ff (985087) trustee : S-1-5-32-548 dacl : * dacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x004c (76) num_aces : 0x00000003 (3) aces : * aces: ARRAY(3) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002031b (131867) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f07ff (985087) trustee : S-1-5-32-544 [2]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f07ff (985087) trustee : S-1-5-32-548 result : NT_STATUS_OK Testing QueryUserInfo level 1 samr_QueryUserInfo: struct samr_QueryUserInfo in: struct samr_QueryUserInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : feceeaf8-446c-410d-b9e6-082877144adc level : 0x0001 (1) samr_QueryUserInfo: struct samr_QueryUserInfo out: struct samr_QueryUserInfo info : * info : union samr_UserInfo(case 1) info1: struct samr_UserInfo1 account_name: struct samr_String length : 0x000a (10) size : 0x000a (10) string : * string : 'Guest' full_name: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' primary_gid : 0x00000202 (514) description: struct samr_String length : 0x0070 (112) size : 0x0070 (112) string : * string : 'Built-in account for guest access to the computer/domain' comment: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' result : NT_STATUS_OK Testing QueryUserInfo level 2 samr_QueryUserInfo: struct samr_QueryUserInfo in: struct samr_QueryUserInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : feceeaf8-446c-410d-b9e6-082877144adc level : 0x0002 (2) samr_QueryUserInfo: struct samr_QueryUserInfo out: struct samr_QueryUserInfo info : * info : union samr_UserInfo(case 2) info2: struct samr_UserInfo2 comment: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' unknown: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : NULL country_code : 0x0000 (0) code_page : 0x0000 (0) result : NT_STATUS_OK Testing QueryUserInfo level 3 samr_QueryUserInfo: struct samr_QueryUserInfo in: struct samr_QueryUserInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : feceeaf8-446c-410d-b9e6-082877144adc level : 0x0003 (3) samr_QueryUserInfo: struct samr_QueryUserInfo out: struct samr_QueryUserInfo info : * info : union samr_UserInfo(case 3) info3: struct samr_UserInfo3 account_name: struct samr_String length : 0x000a (10) size : 0x000a (10) string : * string : 'Guest' full_name: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' rid : 0x000001f5 (501) primary_gid : 0x00000202 (514) home_directory: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' home_drive: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' logon_script: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' profile_path: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' workstations: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' last_logon : Wed Dec 31 19:00:00 1969 EST last_logoff : Wed Dec 31 19:00:00 1969 EST last_password_change : Wed Dec 31 19:00:00 1969 EST allow_password_change : Wed Dec 31 19:00:00 1969 EST force_password_change : Wed Jan 22 17:55:33 1975 EST logon_hours: struct samr_LogonHours units_per_week : 0x00a8 (168) bits : * bits : ffffffffffffffffffffffffffffffffffffffffff bad_password_count : 0x0000 (0) logon_count : 0x0000 (0) acct_flags : 0x00000211 (529) 1: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 1: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 0: ACB_SVRTRUST 1: ACB_PWNOEXP 0: ACB_AUTOLOCK result : NT_STATUS_OK Testing QueryUserInfo level 4 samr_QueryUserInfo: struct samr_QueryUserInfo in: struct samr_QueryUserInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : feceeaf8-446c-410d-b9e6-082877144adc level : 0x0004 (4) samr_QueryUserInfo: struct samr_QueryUserInfo out: struct samr_QueryUserInfo info : * info : union samr_UserInfo(case 4) info4: struct samr_UserInfo4 logon_hours: struct samr_LogonHours units_per_week : 0x00a8 (168) bits : * bits : ffffffffffffffffffffffffffffffffffffffffff result : NT_STATUS_OK Testing QueryUserInfo level 5 samr_QueryUserInfo: struct samr_QueryUserInfo in: struct samr_QueryUserInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : feceeaf8-446c-410d-b9e6-082877144adc level : 0x0005 (5) samr_QueryUserInfo: struct samr_QueryUserInfo out: struct samr_QueryUserInfo info : * info : union samr_UserInfo(case 5) info5: struct samr_UserInfo5 account_name: struct samr_String length : 0x000a (10) size : 0x000a (10) string : * string : 'Guest' full_name: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' rid : 0x000001f5 (501) primary_gid : 0x00000202 (514) home_directory: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' home_drive: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' logon_script: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' profile_path: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' description: struct samr_String length : 0x0070 (112) size : 0x0070 (112) string : * string : 'Built-in account for guest access to the computer/domain' workstations: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' last_logon : Wed Dec 31 19:00:00 1969 EST last_logoff : Wed Dec 31 19:00:00 1969 EST logon_hours: struct samr_LogonHours units_per_week : 0x00a8 (168) bits : * bits : ffffffffffffffffffffffffffffffffffffffffff bad_password_count : 0x0000 (0) logon_count : 0x0000 (0) last_password_change : Wed Dec 31 19:00:00 1969 EST acct_expiry : Wed Jan 22 17:55:33 1975 EST acct_flags : 0x00000211 (529) 1: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 1: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 0: ACB_SVRTRUST 1: ACB_PWNOEXP 0: ACB_AUTOLOCK result : NT_STATUS_OK Testing QueryUserInfo level 6 samr_QueryUserInfo: struct samr_QueryUserInfo in: struct samr_QueryUserInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : feceeaf8-446c-410d-b9e6-082877144adc level : 0x0006 (6) samr_QueryUserInfo: struct samr_QueryUserInfo out: struct samr_QueryUserInfo info : * info : union samr_UserInfo(case 6) info6: struct samr_UserInfo6 account_name: struct samr_String length : 0x000a (10) size : 0x000a (10) string : * string : 'Guest' full_name: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' result : NT_STATUS_OK Testing QueryUserInfo level 7 samr_QueryUserInfo: struct samr_QueryUserInfo in: struct samr_QueryUserInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : feceeaf8-446c-410d-b9e6-082877144adc level : 0x0007 (7) samr_QueryUserInfo: struct samr_QueryUserInfo out: struct samr_QueryUserInfo info : * info : union samr_UserInfo(case 7) info7: struct samr_UserInfo7 account_name: struct samr_String length : 0x000a (10) size : 0x000a (10) string : * string : 'Guest' result : NT_STATUS_OK Testing QueryUserInfo level 8 samr_QueryUserInfo: struct samr_QueryUserInfo in: struct samr_QueryUserInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : feceeaf8-446c-410d-b9e6-082877144adc level : 0x0008 (8) samr_QueryUserInfo: struct samr_QueryUserInfo out: struct samr_QueryUserInfo info : * info : union samr_UserInfo(case 8) info8: struct samr_UserInfo8 full_name: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' result : NT_STATUS_OK Testing QueryUserInfo level 9 samr_QueryUserInfo: struct samr_QueryUserInfo in: struct samr_QueryUserInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : feceeaf8-446c-410d-b9e6-082877144adc level : 0x0009 (9) samr_QueryUserInfo: struct samr_QueryUserInfo out: struct samr_QueryUserInfo info : * info : union samr_UserInfo(case 9) info9: struct samr_UserInfo9 primary_gid : 0x00000202 (514) result : NT_STATUS_OK Testing QueryUserInfo level 10 samr_QueryUserInfo: struct samr_QueryUserInfo in: struct samr_QueryUserInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : feceeaf8-446c-410d-b9e6-082877144adc level : 0x000a (10) samr_QueryUserInfo: struct samr_QueryUserInfo out: struct samr_QueryUserInfo info : * info : union samr_UserInfo(case 10) info10: struct samr_UserInfo10 home_directory: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' home_drive: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' result : NT_STATUS_OK Testing QueryUserInfo level 11 samr_QueryUserInfo: struct samr_QueryUserInfo in: struct samr_QueryUserInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : feceeaf8-446c-410d-b9e6-082877144adc level : 0x000b (11) samr_QueryUserInfo: struct samr_QueryUserInfo out: struct samr_QueryUserInfo info : * info : union samr_UserInfo(case 11) info11: struct samr_UserInfo11 logon_script: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' result : NT_STATUS_OK Testing QueryUserInfo level 12 samr_QueryUserInfo: struct samr_QueryUserInfo in: struct samr_QueryUserInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : feceeaf8-446c-410d-b9e6-082877144adc level : 0x000c (12) samr_QueryUserInfo: struct samr_QueryUserInfo out: struct samr_QueryUserInfo info : * info : union samr_UserInfo(case 12) info12: struct samr_UserInfo12 profile_path: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' result : NT_STATUS_OK Testing QueryUserInfo level 13 samr_QueryUserInfo: struct samr_QueryUserInfo in: struct samr_QueryUserInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : feceeaf8-446c-410d-b9e6-082877144adc level : 0x000d (13) samr_QueryUserInfo: struct samr_QueryUserInfo out: struct samr_QueryUserInfo info : * info : union samr_UserInfo(case 13) info13: struct samr_UserInfo13 description: struct samr_String length : 0x0070 (112) size : 0x0070 (112) string : * string : 'Built-in account for guest access to the computer/domain' result : NT_STATUS_OK Testing QueryUserInfo level 14 samr_QueryUserInfo: struct samr_QueryUserInfo in: struct samr_QueryUserInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : feceeaf8-446c-410d-b9e6-082877144adc level : 0x000e (14) samr_QueryUserInfo: struct samr_QueryUserInfo out: struct samr_QueryUserInfo info : * info : union samr_UserInfo(case 14) info14: struct samr_UserInfo14 workstations: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' result : NT_STATUS_OK Testing QueryUserInfo level 16 samr_QueryUserInfo: struct samr_QueryUserInfo in: struct samr_QueryUserInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : feceeaf8-446c-410d-b9e6-082877144adc level : 0x0010 (16) samr_QueryUserInfo: struct samr_QueryUserInfo out: struct samr_QueryUserInfo info : * info : union samr_UserInfo(case 16) info16: struct samr_UserInfo16 acct_flags : 0x00000211 (529) 1: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 1: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 0: ACB_SVRTRUST 1: ACB_PWNOEXP 0: ACB_AUTOLOCK result : NT_STATUS_OK Testing QueryUserInfo level 17 samr_QueryUserInfo: struct samr_QueryUserInfo in: struct samr_QueryUserInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : feceeaf8-446c-410d-b9e6-082877144adc level : 0x0011 (17) samr_QueryUserInfo: struct samr_QueryUserInfo out: struct samr_QueryUserInfo info : * info : union samr_UserInfo(case 17) info17: struct samr_UserInfo17 acct_expiry : Wed Jan 22 17:55:33 1975 EST result : NT_STATUS_OK Testing QueryUserInfo level 20 samr_QueryUserInfo: struct samr_QueryUserInfo in: struct samr_QueryUserInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : feceeaf8-446c-410d-b9e6-082877144adc level : 0x0014 (20) samr_QueryUserInfo: struct samr_QueryUserInfo out: struct samr_QueryUserInfo info : * info : union samr_UserInfo(case 20) info20: struct samr_UserInfo20 parameters: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' result : NT_STATUS_OK Testing QueryUserInfo level 21 samr_QueryUserInfo: struct samr_QueryUserInfo in: struct samr_QueryUserInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : feceeaf8-446c-410d-b9e6-082877144adc level : 0x0015 (21) samr_QueryUserInfo: struct samr_QueryUserInfo out: struct samr_QueryUserInfo info : * info : union samr_UserInfo(case 21) info21: struct samr_UserInfo21 last_logon : Wed Dec 31 19:00:00 1969 EST last_logoff : Wed Dec 31 19:00:00 1969 EST last_password_change : Wed Dec 31 19:00:00 1969 EST acct_expiry : Wed Jan 22 17:55:33 1975 EST allow_password_change : Wed Dec 31 19:00:00 1969 EST force_password_change : Wed Jan 22 17:55:33 1975 EST account_name: struct samr_String length : 0x000a (10) size : 0x000a (10) string : * string : 'Guest' full_name: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' home_directory: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' home_drive: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' logon_script: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' profile_path: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' description: struct samr_String length : 0x0070 (112) size : 0x0070 (112) string : * string : 'Built-in account for guest access to the computer/domain' workstations: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' comment: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' parameters: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' unknown1: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : NULL unknown2: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : NULL unknown3: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : NULL buf_count : 0x00000000 (0) buffer : NULL rid : 0x000001f5 (501) primary_gid : 0x00000202 (514) acct_flags : 0x00000211 (529) 1: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 1: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 0: ACB_SVRTRUST 1: ACB_PWNOEXP 0: ACB_AUTOLOCK fields_present : 0x00ffffff (16777215) 1: SAMR_FIELD_NAME 1: SAMR_FIELD_DESCRIPTION 1: SAMR_FIELD_COMMENT 1: SAMR_FIELD_LOGON_SCRIPT 1: SAMR_FIELD_PROFILE_PATH 1: SAMR_FIELD_WORKSTATION 1: SAMR_FIELD_LOGON_HOURS 1: SAMR_FIELD_ACCT_FLAGS 1: SAMR_FIELD_PARAMETERS 1: SAMR_FIELD_COUNTRY_CODE 1: SAMR_FIELD_CODE_PAGE 0: SAMR_FIELD_PASSWORD 0: SAMR_FIELD_PASSWORD2 logon_hours: struct samr_LogonHours units_per_week : 0x00a8 (168) bits : * bits : ffffffffffffffffffffffffffffffffffffffffff bad_password_count : 0x0000 (0) logon_count : 0x0000 (0) country_code : 0x0000 (0) code_page : 0x0000 (0) nt_password_set : 0x00 (0) lm_password_set : 0x00 (0) password_expired : 0x00 (0) unknown4 : 0x00 (0) result : NT_STATUS_OK Testing QueryUserInfo2 level 1 samr_QueryUserInfo2: struct samr_QueryUserInfo2 in: struct samr_QueryUserInfo2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : feceeaf8-446c-410d-b9e6-082877144adc level : 0x0001 (1) samr_QueryUserInfo2: struct samr_QueryUserInfo2 out: struct samr_QueryUserInfo2 info : * info : union samr_UserInfo(case 1) info1: struct samr_UserInfo1 account_name: struct samr_String length : 0x000a (10) size : 0x000a (10) string : * string : 'Guest' full_name: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' primary_gid : 0x00000202 (514) description: struct samr_String length : 0x0070 (112) size : 0x0070 (112) string : * string : 'Built-in account for guest access to the computer/domain' comment: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' result : NT_STATUS_OK Testing QueryUserInfo2 level 2 samr_QueryUserInfo2: struct samr_QueryUserInfo2 in: struct samr_QueryUserInfo2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : feceeaf8-446c-410d-b9e6-082877144adc level : 0x0002 (2) samr_QueryUserInfo2: struct samr_QueryUserInfo2 out: struct samr_QueryUserInfo2 info : * info : union samr_UserInfo(case 2) info2: struct samr_UserInfo2 comment: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' unknown: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : NULL country_code : 0x0000 (0) code_page : 0x0000 (0) result : NT_STATUS_OK Testing QueryUserInfo2 level 3 samr_QueryUserInfo2: struct samr_QueryUserInfo2 in: struct samr_QueryUserInfo2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : feceeaf8-446c-410d-b9e6-082877144adc level : 0x0003 (3) samr_QueryUserInfo2: struct samr_QueryUserInfo2 out: struct samr_QueryUserInfo2 info : * info : union samr_UserInfo(case 3) info3: struct samr_UserInfo3 account_name: struct samr_String length : 0x000a (10) size : 0x000a (10) string : * string : 'Guest' full_name: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' rid : 0x000001f5 (501) primary_gid : 0x00000202 (514) home_directory: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' home_drive: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' logon_script: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' profile_path: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' workstations: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' last_logon : Wed Dec 31 19:00:00 1969 EST last_logoff : Wed Dec 31 19:00:00 1969 EST last_password_change : Wed Dec 31 19:00:00 1969 EST allow_password_change : Wed Dec 31 19:00:00 1969 EST force_password_change : Wed Jan 22 17:55:33 1975 EST logon_hours: struct samr_LogonHours units_per_week : 0x00a8 (168) bits : * bits : ffffffffffffffffffffffffffffffffffffffffff bad_password_count : 0x0000 (0) logon_count : 0x0000 (0) acct_flags : 0x00000211 (529) 1: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 1: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 0: ACB_SVRTRUST 1: ACB_PWNOEXP 0: ACB_AUTOLOCK result : NT_STATUS_OK Testing QueryUserInfo2 level 4 samr_QueryUserInfo2: struct samr_QueryUserInfo2 in: struct samr_QueryUserInfo2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : feceeaf8-446c-410d-b9e6-082877144adc level : 0x0004 (4) samr_QueryUserInfo2: struct samr_QueryUserInfo2 out: struct samr_QueryUserInfo2 info : * info : union samr_UserInfo(case 4) info4: struct samr_UserInfo4 logon_hours: struct samr_LogonHours units_per_week : 0x00a8 (168) bits : * bits : ffffffffffffffffffffffffffffffffffffffffff result : NT_STATUS_OK Testing QueryUserInfo2 level 5 samr_QueryUserInfo2: struct samr_QueryUserInfo2 in: struct samr_QueryUserInfo2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : feceeaf8-446c-410d-b9e6-082877144adc level : 0x0005 (5) samr_QueryUserInfo2: struct samr_QueryUserInfo2 out: struct samr_QueryUserInfo2 info : * info : union samr_UserInfo(case 5) info5: struct samr_UserInfo5 account_name: struct samr_String length : 0x000a (10) size : 0x000a (10) string : * string : 'Guest' full_name: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' rid : 0x000001f5 (501) primary_gid : 0x00000202 (514) home_directory: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' home_drive: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' logon_script: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' profile_path: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' description: struct samr_String length : 0x0070 (112) size : 0x0070 (112) string : * string : 'Built-in account for guest access to the computer/domain' workstations: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' last_logon : Wed Dec 31 19:00:00 1969 EST last_logoff : Wed Dec 31 19:00:00 1969 EST logon_hours: struct samr_LogonHours units_per_week : 0x00a8 (168) bits : * bits : ffffffffffffffffffffffffffffffffffffffffff bad_password_count : 0x0000 (0) logon_count : 0x0000 (0) last_password_change : Wed Dec 31 19:00:00 1969 EST acct_expiry : Wed Jan 22 17:55:33 1975 EST acct_flags : 0x00000211 (529) 1: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 1: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 0: ACB_SVRTRUST 1: ACB_PWNOEXP 0: ACB_AUTOLOCK result : NT_STATUS_OK Testing QueryUserInfo2 level 6 samr_QueryUserInfo2: struct samr_QueryUserInfo2 in: struct samr_QueryUserInfo2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : feceeaf8-446c-410d-b9e6-082877144adc level : 0x0006 (6) samr_QueryUserInfo2: struct samr_QueryUserInfo2 out: struct samr_QueryUserInfo2 info : * info : union samr_UserInfo(case 6) info6: struct samr_UserInfo6 account_name: struct samr_String length : 0x000a (10) size : 0x000a (10) string : * string : 'Guest' full_name: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' result : NT_STATUS_OK Testing QueryUserInfo2 level 7 samr_QueryUserInfo2: struct samr_QueryUserInfo2 in: struct samr_QueryUserInfo2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : feceeaf8-446c-410d-b9e6-082877144adc level : 0x0007 (7) samr_QueryUserInfo2: struct samr_QueryUserInfo2 out: struct samr_QueryUserInfo2 info : * info : union samr_UserInfo(case 7) info7: struct samr_UserInfo7 account_name: struct samr_String length : 0x000a (10) size : 0x000a (10) string : * string : 'Guest' result : NT_STATUS_OK Testing QueryUserInfo2 level 8 samr_QueryUserInfo2: struct samr_QueryUserInfo2 in: struct samr_QueryUserInfo2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : feceeaf8-446c-410d-b9e6-082877144adc level : 0x0008 (8) samr_QueryUserInfo2: struct samr_QueryUserInfo2 out: struct samr_QueryUserInfo2 info : * info : union samr_UserInfo(case 8) info8: struct samr_UserInfo8 full_name: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' result : NT_STATUS_OK Testing QueryUserInfo2 level 9 samr_QueryUserInfo2: struct samr_QueryUserInfo2 in: struct samr_QueryUserInfo2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : feceeaf8-446c-410d-b9e6-082877144adc level : 0x0009 (9) samr_QueryUserInfo2: struct samr_QueryUserInfo2 out: struct samr_QueryUserInfo2 info : * info : union samr_UserInfo(case 9) info9: struct samr_UserInfo9 primary_gid : 0x00000202 (514) result : NT_STATUS_OK Testing QueryUserInfo2 level 10 samr_QueryUserInfo2: struct samr_QueryUserInfo2 in: struct samr_QueryUserInfo2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : feceeaf8-446c-410d-b9e6-082877144adc level : 0x000a (10) samr_QueryUserInfo2: struct samr_QueryUserInfo2 out: struct samr_QueryUserInfo2 info : * info : union samr_UserInfo(case 10) info10: struct samr_UserInfo10 home_directory: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' home_drive: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' result : NT_STATUS_OK Testing QueryUserInfo2 level 11 samr_QueryUserInfo2: struct samr_QueryUserInfo2 in: struct samr_QueryUserInfo2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : feceeaf8-446c-410d-b9e6-082877144adc level : 0x000b (11) samr_QueryUserInfo2: struct samr_QueryUserInfo2 out: struct samr_QueryUserInfo2 info : * info : union samr_UserInfo(case 11) info11: struct samr_UserInfo11 logon_script: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' result : NT_STATUS_OK Testing QueryUserInfo2 level 12 samr_QueryUserInfo2: struct samr_QueryUserInfo2 in: struct samr_QueryUserInfo2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : feceeaf8-446c-410d-b9e6-082877144adc level : 0x000c (12) samr_QueryUserInfo2: struct samr_QueryUserInfo2 out: struct samr_QueryUserInfo2 info : * info : union samr_UserInfo(case 12) info12: struct samr_UserInfo12 profile_path: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' result : NT_STATUS_OK Testing QueryUserInfo2 level 13 samr_QueryUserInfo2: struct samr_QueryUserInfo2 in: struct samr_QueryUserInfo2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : feceeaf8-446c-410d-b9e6-082877144adc level : 0x000d (13) samr_QueryUserInfo2: struct samr_QueryUserInfo2 out: struct samr_QueryUserInfo2 info : * info : union samr_UserInfo(case 13) info13: struct samr_UserInfo13 description: struct samr_String length : 0x0070 (112) size : 0x0070 (112) string : * string : 'Built-in account for guest access to the computer/domain' result : NT_STATUS_OK Testing QueryUserInfo2 level 14 samr_QueryUserInfo2: struct samr_QueryUserInfo2 in: struct samr_QueryUserInfo2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : feceeaf8-446c-410d-b9e6-082877144adc level : 0x000e (14) samr_QueryUserInfo2: struct samr_QueryUserInfo2 out: struct samr_QueryUserInfo2 info : * info : union samr_UserInfo(case 14) info14: struct samr_UserInfo14 workstations: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' result : NT_STATUS_OK Testing QueryUserInfo2 level 16 samr_QueryUserInfo2: struct samr_QueryUserInfo2 in: struct samr_QueryUserInfo2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : feceeaf8-446c-410d-b9e6-082877144adc level : 0x0010 (16) samr_QueryUserInfo2: struct samr_QueryUserInfo2 out: struct samr_QueryUserInfo2 info : * info : union samr_UserInfo(case 16) info16: struct samr_UserInfo16 acct_flags : 0x00000211 (529) 1: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 1: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 0: ACB_SVRTRUST 1: ACB_PWNOEXP 0: ACB_AUTOLOCK result : NT_STATUS_OK Testing QueryUserInfo2 level 17 samr_QueryUserInfo2: struct samr_QueryUserInfo2 in: struct samr_QueryUserInfo2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : feceeaf8-446c-410d-b9e6-082877144adc level : 0x0011 (17) samr_QueryUserInfo2: struct samr_QueryUserInfo2 out: struct samr_QueryUserInfo2 info : * info : union samr_UserInfo(case 17) info17: struct samr_UserInfo17 acct_expiry : Wed Jan 22 17:55:33 1975 EST result : NT_STATUS_OK Testing QueryUserInfo2 level 20 samr_QueryUserInfo2: struct samr_QueryUserInfo2 in: struct samr_QueryUserInfo2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : feceeaf8-446c-410d-b9e6-082877144adc level : 0x0014 (20) samr_QueryUserInfo2: struct samr_QueryUserInfo2 out: struct samr_QueryUserInfo2 info : * info : union samr_UserInfo(case 20) info20: struct samr_UserInfo20 parameters: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' result : NT_STATUS_OK Testing QueryUserInfo2 level 21 samr_QueryUserInfo2: struct samr_QueryUserInfo2 in: struct samr_QueryUserInfo2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : feceeaf8-446c-410d-b9e6-082877144adc level : 0x0015 (21) samr_QueryUserInfo2: struct samr_QueryUserInfo2 out: struct samr_QueryUserInfo2 info : * info : union samr_UserInfo(case 21) info21: struct samr_UserInfo21 last_logon : Wed Dec 31 19:00:00 1969 EST last_logoff : Wed Dec 31 19:00:00 1969 EST last_password_change : Wed Dec 31 19:00:00 1969 EST acct_expiry : Wed Jan 22 17:55:33 1975 EST allow_password_change : Wed Dec 31 19:00:00 1969 EST force_password_change : Wed Jan 22 17:55:33 1975 EST account_name: struct samr_String length : 0x000a (10) size : 0x000a (10) string : * string : 'Guest' full_name: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' home_directory: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' home_drive: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' logon_script: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' profile_path: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' description: struct samr_String length : 0x0070 (112) size : 0x0070 (112) string : * string : 'Built-in account for guest access to the computer/domain' workstations: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' comment: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' parameters: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' unknown1: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : NULL unknown2: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : NULL unknown3: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : NULL buf_count : 0x00000000 (0) buffer : NULL rid : 0x000001f5 (501) primary_gid : 0x00000202 (514) acct_flags : 0x00000211 (529) 1: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 1: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 0: ACB_SVRTRUST 1: ACB_PWNOEXP 0: ACB_AUTOLOCK fields_present : 0x00ffffff (16777215) 1: SAMR_FIELD_NAME 1: SAMR_FIELD_DESCRIPTION 1: SAMR_FIELD_COMMENT 1: SAMR_FIELD_LOGON_SCRIPT 1: SAMR_FIELD_PROFILE_PATH 1: SAMR_FIELD_WORKSTATION 1: SAMR_FIELD_LOGON_HOURS 1: SAMR_FIELD_ACCT_FLAGS 1: SAMR_FIELD_PARAMETERS 1: SAMR_FIELD_COUNTRY_CODE 1: SAMR_FIELD_CODE_PAGE 0: SAMR_FIELD_PASSWORD 0: SAMR_FIELD_PASSWORD2 logon_hours: struct samr_LogonHours units_per_week : 0x00a8 (168) bits : * bits : ffffffffffffffffffffffffffffffffffffffffff bad_password_count : 0x0000 (0) logon_count : 0x0000 (0) country_code : 0x0000 (0) code_page : 0x0000 (0) nt_password_set : 0x00 (0) lm_password_set : 0x00 (0) password_expired : 0x00 (0) unknown4 : 0x00 (0) result : NT_STATUS_OK Testing GetUserPwInfo samr_GetUserPwInfo: struct samr_GetUserPwInfo in: struct samr_GetUserPwInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : feceeaf8-446c-410d-b9e6-082877144adc samr_GetUserPwInfo: struct samr_GetUserPwInfo out: struct samr_GetUserPwInfo info: struct samr_PwInfo min_password_length : 0x0000 (0) password_properties : 0x00000000 (0) result : NT_STATUS_OK testing GetGroupsForUser samr_GetGroupsForUser: struct samr_GetGroupsForUser in: struct samr_GetGroupsForUser user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : feceeaf8-446c-410d-b9e6-082877144adc samr_GetGroupsForUser: struct samr_GetGroupsForUser out: struct samr_GetGroupsForUser rids : * rids: struct samr_RidArray count : 0x00000001 (1) rid : * rid: ARRAY(1) [0]: struct samr_RidType rid : 0x00000202 (514) type : 0x00000007 (7) result : NT_STATUS_OK samr_Close: struct samr_Close in: struct samr_Close handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : feceeaf8-446c-410d-b9e6-082877144adc samr_Close: struct samr_Close out: struct samr_Close handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : NT_STATUS_OK Testing OpenUser(1002) samr_OpenUser: struct samr_OpenUser in: struct samr_OpenUser domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f access_mask : 0x02000000 (33554432) rid : 0x000003ea (1002) samr_OpenUser: struct samr_OpenUser out: struct samr_OpenUser user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 381e5f07-a695-44b3-9c2d-bfd698786108 result : NT_STATUS_OK samr_QuerySecurity: struct samr_QuerySecurity in: struct samr_QuerySecurity handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 381e5f07-a695-44b3-9c2d-bfd698786108 sec_info : 0x00000007 (7) samr_QuerySecurity: struct samr_QuerySecurity out: struct samr_QuerySecurity sdbuf : * sdbuf: struct sec_desc_buf sd_size : 0x000000a4 (164) sd : * sd: struct security_descriptor revision : SEC_DESC_REVISION_1 (1) type : 0x8004 (32772) 0: SEC_DESC_OWNER_DEFAULTED 0: SEC_DESC_GROUP_DEFAULTED 1: SEC_DESC_DACL_PRESENT 0: SEC_DESC_DACL_DEFAULTED 0: SEC_DESC_SACL_PRESENT 0: SEC_DESC_SACL_DEFAULTED 0: SEC_DESC_DACL_TRUSTED 0: SEC_DESC_SERVER_SECURITY 0: SEC_DESC_DACL_AUTO_INHERIT_REQ 0: SEC_DESC_SACL_AUTO_INHERIT_REQ 0: SEC_DESC_DACL_AUTO_INHERITED 0: SEC_DESC_SACL_AUTO_INHERITED 0: SEC_DESC_DACL_PROTECTED 0: SEC_DESC_SACL_PROTECTED 0: SEC_DESC_RM_CONTROL_VALID 1: SEC_DESC_SELF_RELATIVE owner_sid : * owner_sid : S-1-5-32-544 group_sid : * group_sid : S-1-5-32-544 sacl : * sacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0070 (112) num_aces : 0x00000004 (4) aces : * aces: ARRAY(4) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002035b (131931) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f07ff (985087) trustee : S-1-5-32-544 [2]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f07ff (985087) trustee : S-1-5-32-548 [3]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0024 (36) access_mask : 0x00020044 (131140) trustee : S-1-5-21-662975699-1857117334-953900138-1002 dacl : * dacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0070 (112) num_aces : 0x00000004 (4) aces : * aces: ARRAY(4) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002035b (131931) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f07ff (985087) trustee : S-1-5-32-544 [2]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f07ff (985087) trustee : S-1-5-32-548 [3]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0024 (36) access_mask : 0x00020044 (131140) trustee : S-1-5-21-662975699-1857117334-953900138-1002 result : NT_STATUS_OK samr_SetSecurity: struct samr_SetSecurity in: struct samr_SetSecurity handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 381e5f07-a695-44b3-9c2d-bfd698786108 sec_info : 0x00000007 (7) sdbuf : * sdbuf: struct sec_desc_buf sd_size : 0x00000114 (276) sd : * sd: struct security_descriptor revision : SEC_DESC_REVISION_1 (1) type : 0x8004 (32772) 0: SEC_DESC_OWNER_DEFAULTED 0: SEC_DESC_GROUP_DEFAULTED 1: SEC_DESC_DACL_PRESENT 0: SEC_DESC_DACL_DEFAULTED 0: SEC_DESC_SACL_PRESENT 0: SEC_DESC_SACL_DEFAULTED 0: SEC_DESC_DACL_TRUSTED 0: SEC_DESC_SERVER_SECURITY 0: SEC_DESC_DACL_AUTO_INHERIT_REQ 0: SEC_DESC_SACL_AUTO_INHERIT_REQ 0: SEC_DESC_DACL_AUTO_INHERITED 0: SEC_DESC_SACL_AUTO_INHERITED 0: SEC_DESC_DACL_PROTECTED 0: SEC_DESC_SACL_PROTECTED 0: SEC_DESC_RM_CONTROL_VALID 1: SEC_DESC_SELF_RELATIVE owner_sid : * owner_sid : S-1-5-32-544 group_sid : * group_sid : S-1-5-32-544 sacl : * sacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0070 (112) num_aces : 0x00000004 (4) aces : * aces: ARRAY(4) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002035b (131931) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f07ff (985087) trustee : S-1-5-32-544 [2]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f07ff (985087) trustee : S-1-5-32-548 [3]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0024 (36) access_mask : 0x00020044 (131140) trustee : S-1-5-21-662975699-1857117334-953900138-1002 dacl : * dacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0070 (112) num_aces : 0x00000004 (4) aces : * aces: ARRAY(4) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002035b (131931) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f07ff (985087) trustee : S-1-5-32-544 [2]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f07ff (985087) trustee : S-1-5-32-548 [3]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0024 (36) access_mask : 0x00020044 (131140) trustee : S-1-5-21-662975699-1857117334-953900138-1002 samr_SetSecurity: struct samr_SetSecurity out: struct samr_SetSecurity result : NT_STATUS_OK samr_QuerySecurity: struct samr_QuerySecurity in: struct samr_QuerySecurity handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 381e5f07-a695-44b3-9c2d-bfd698786108 sec_info : 0x00000007 (7) samr_QuerySecurity: struct samr_QuerySecurity out: struct samr_QuerySecurity sdbuf : * sdbuf: struct sec_desc_buf sd_size : 0x000000a4 (164) sd : * sd: struct security_descriptor revision : SEC_DESC_REVISION_1 (1) type : 0x8004 (32772) 0: SEC_DESC_OWNER_DEFAULTED 0: SEC_DESC_GROUP_DEFAULTED 1: SEC_DESC_DACL_PRESENT 0: SEC_DESC_DACL_DEFAULTED 0: SEC_DESC_SACL_PRESENT 0: SEC_DESC_SACL_DEFAULTED 0: SEC_DESC_DACL_TRUSTED 0: SEC_DESC_SERVER_SECURITY 0: SEC_DESC_DACL_AUTO_INHERIT_REQ 0: SEC_DESC_SACL_AUTO_INHERIT_REQ 0: SEC_DESC_DACL_AUTO_INHERITED 0: SEC_DESC_SACL_AUTO_INHERITED 0: SEC_DESC_DACL_PROTECTED 0: SEC_DESC_SACL_PROTECTED 0: SEC_DESC_RM_CONTROL_VALID 1: SEC_DESC_SELF_RELATIVE owner_sid : * owner_sid : S-1-5-32-544 group_sid : * group_sid : S-1-5-32-544 sacl : * sacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0070 (112) num_aces : 0x00000004 (4) aces : * aces: ARRAY(4) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002035b (131931) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f07ff (985087) trustee : S-1-5-32-544 [2]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f07ff (985087) trustee : S-1-5-32-548 [3]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0024 (36) access_mask : 0x00020044 (131140) trustee : S-1-5-21-662975699-1857117334-953900138-1002 dacl : * dacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0070 (112) num_aces : 0x00000004 (4) aces : * aces: ARRAY(4) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002035b (131931) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f07ff (985087) trustee : S-1-5-32-544 [2]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f07ff (985087) trustee : S-1-5-32-548 [3]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0024 (36) access_mask : 0x00020044 (131140) trustee : S-1-5-21-662975699-1857117334-953900138-1002 result : NT_STATUS_OK Testing QueryUserInfo level 1 samr_QueryUserInfo: struct samr_QueryUserInfo in: struct samr_QueryUserInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 381e5f07-a695-44b3-9c2d-bfd698786108 level : 0x0001 (1) samr_QueryUserInfo: struct samr_QueryUserInfo out: struct samr_QueryUserInfo info : * info : union samr_UserInfo(case 1) info1: struct samr_UserInfo1 account_name: struct samr_String length : 0x0014 (20) size : 0x0014 (20) string : * string : 'SPIN4BDC1$' full_name: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' primary_gid : 0x00000201 (513) description: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' comment: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' result : NT_STATUS_OK Testing QueryUserInfo level 2 samr_QueryUserInfo: struct samr_QueryUserInfo in: struct samr_QueryUserInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 381e5f07-a695-44b3-9c2d-bfd698786108 level : 0x0002 (2) samr_QueryUserInfo: struct samr_QueryUserInfo out: struct samr_QueryUserInfo info : * info : union samr_UserInfo(case 2) info2: struct samr_UserInfo2 comment: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' unknown: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : NULL country_code : 0x0000 (0) code_page : 0x0000 (0) result : NT_STATUS_OK Testing QueryUserInfo level 3 samr_QueryUserInfo: struct samr_QueryUserInfo in: struct samr_QueryUserInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 381e5f07-a695-44b3-9c2d-bfd698786108 level : 0x0003 (3) samr_QueryUserInfo: struct samr_QueryUserInfo out: struct samr_QueryUserInfo info : * info : union samr_UserInfo(case 3) info3: struct samr_UserInfo3 account_name: struct samr_String length : 0x0014 (20) size : 0x0014 (20) string : * string : 'SPIN4BDC1$' full_name: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' rid : 0x000003ea (1002) primary_gid : 0x00000201 (513) home_directory: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' home_drive: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' logon_script: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' profile_path: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' workstations: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' last_logon : Wed Dec 31 19:00:00 1969 EST last_logoff : Wed Dec 31 19:00:00 1969 EST last_password_change : Tue Jan 11 14:18:09 2005 EST allow_password_change : Tue Jan 11 14:18:09 2005 EST force_password_change : Wed Feb 23 13:05:41 2005 EST logon_hours: struct samr_LogonHours units_per_week : 0x00a8 (168) bits : * bits : ffffffffffffffffffffffffffffffffffffffffff bad_password_count : 0x0000 (0) logon_count : 0x0000 (0) acct_flags : 0x00000100 (256) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 1: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK result : NT_STATUS_OK Testing QueryUserInfo level 4 samr_QueryUserInfo: struct samr_QueryUserInfo in: struct samr_QueryUserInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 381e5f07-a695-44b3-9c2d-bfd698786108 level : 0x0004 (4) samr_QueryUserInfo: struct samr_QueryUserInfo out: struct samr_QueryUserInfo info : * info : union samr_UserInfo(case 4) info4: struct samr_UserInfo4 logon_hours: struct samr_LogonHours units_per_week : 0x00a8 (168) bits : * bits : ffffffffffffffffffffffffffffffffffffffffff result : NT_STATUS_OK Testing QueryUserInfo level 5 samr_QueryUserInfo: struct samr_QueryUserInfo in: struct samr_QueryUserInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 381e5f07-a695-44b3-9c2d-bfd698786108 level : 0x0005 (5) samr_QueryUserInfo: struct samr_QueryUserInfo out: struct samr_QueryUserInfo info : * info : union samr_UserInfo(case 5) info5: struct samr_UserInfo5 account_name: struct samr_String length : 0x0014 (20) size : 0x0014 (20) string : * string : 'SPIN4BDC1$' full_name: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' rid : 0x000003ea (1002) primary_gid : 0x00000201 (513) home_directory: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' home_drive: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' logon_script: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' profile_path: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' description: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' workstations: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' last_logon : Wed Dec 31 19:00:00 1969 EST last_logoff : Wed Dec 31 19:00:00 1969 EST logon_hours: struct samr_LogonHours units_per_week : 0x00a8 (168) bits : * bits : ffffffffffffffffffffffffffffffffffffffffff bad_password_count : 0x0000 (0) logon_count : 0x0000 (0) last_password_change : Tue Jan 11 14:18:09 2005 EST acct_expiry : Wed Dec 31 19:00:00 1969 EST acct_flags : 0x00000100 (256) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 1: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK result : NT_STATUS_OK Testing QueryUserInfo level 6 samr_QueryUserInfo: struct samr_QueryUserInfo in: struct samr_QueryUserInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 381e5f07-a695-44b3-9c2d-bfd698786108 level : 0x0006 (6) samr_QueryUserInfo: struct samr_QueryUserInfo out: struct samr_QueryUserInfo info : * info : union samr_UserInfo(case 6) info6: struct samr_UserInfo6 account_name: struct samr_String length : 0x0014 (20) size : 0x0014 (20) string : * string : 'SPIN4BDC1$' full_name: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' result : NT_STATUS_OK Testing QueryUserInfo level 7 samr_QueryUserInfo: struct samr_QueryUserInfo in: struct samr_QueryUserInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 381e5f07-a695-44b3-9c2d-bfd698786108 level : 0x0007 (7) samr_QueryUserInfo: struct samr_QueryUserInfo out: struct samr_QueryUserInfo info : * info : union samr_UserInfo(case 7) info7: struct samr_UserInfo7 account_name: struct samr_String length : 0x0014 (20) size : 0x0014 (20) string : * string : 'SPIN4BDC1$' result : NT_STATUS_OK Testing QueryUserInfo level 8 samr_QueryUserInfo: struct samr_QueryUserInfo in: struct samr_QueryUserInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 381e5f07-a695-44b3-9c2d-bfd698786108 level : 0x0008 (8) samr_QueryUserInfo: struct samr_QueryUserInfo out: struct samr_QueryUserInfo info : * info : union samr_UserInfo(case 8) info8: struct samr_UserInfo8 full_name: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' result : NT_STATUS_OK Testing QueryUserInfo level 9 samr_QueryUserInfo: struct samr_QueryUserInfo in: struct samr_QueryUserInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 381e5f07-a695-44b3-9c2d-bfd698786108 level : 0x0009 (9) samr_QueryUserInfo: struct samr_QueryUserInfo out: struct samr_QueryUserInfo info : * info : union samr_UserInfo(case 9) info9: struct samr_UserInfo9 primary_gid : 0x00000201 (513) result : NT_STATUS_OK Testing QueryUserInfo level 10 samr_QueryUserInfo: struct samr_QueryUserInfo in: struct samr_QueryUserInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 381e5f07-a695-44b3-9c2d-bfd698786108 level : 0x000a (10) samr_QueryUserInfo: struct samr_QueryUserInfo out: struct samr_QueryUserInfo info : * info : union samr_UserInfo(case 10) info10: struct samr_UserInfo10 home_directory: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' home_drive: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' result : NT_STATUS_OK Testing QueryUserInfo level 11 samr_QueryUserInfo: struct samr_QueryUserInfo in: struct samr_QueryUserInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 381e5f07-a695-44b3-9c2d-bfd698786108 level : 0x000b (11) samr_QueryUserInfo: struct samr_QueryUserInfo out: struct samr_QueryUserInfo info : * info : union samr_UserInfo(case 11) info11: struct samr_UserInfo11 logon_script: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' result : NT_STATUS_OK Testing QueryUserInfo level 12 samr_QueryUserInfo: struct samr_QueryUserInfo in: struct samr_QueryUserInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 381e5f07-a695-44b3-9c2d-bfd698786108 level : 0x000c (12) samr_QueryUserInfo: struct samr_QueryUserInfo out: struct samr_QueryUserInfo info : * info : union samr_UserInfo(case 12) info12: struct samr_UserInfo12 profile_path: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' result : NT_STATUS_OK Testing QueryUserInfo level 13 samr_QueryUserInfo: struct samr_QueryUserInfo in: struct samr_QueryUserInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 381e5f07-a695-44b3-9c2d-bfd698786108 level : 0x000d (13) samr_QueryUserInfo: struct samr_QueryUserInfo out: struct samr_QueryUserInfo info : * info : union samr_UserInfo(case 13) info13: struct samr_UserInfo13 description: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' result : NT_STATUS_OK Testing QueryUserInfo level 14 samr_QueryUserInfo: struct samr_QueryUserInfo in: struct samr_QueryUserInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 381e5f07-a695-44b3-9c2d-bfd698786108 level : 0x000e (14) samr_QueryUserInfo: struct samr_QueryUserInfo out: struct samr_QueryUserInfo info : * info : union samr_UserInfo(case 14) info14: struct samr_UserInfo14 workstations: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' result : NT_STATUS_OK Testing QueryUserInfo level 16 samr_QueryUserInfo: struct samr_QueryUserInfo in: struct samr_QueryUserInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 381e5f07-a695-44b3-9c2d-bfd698786108 level : 0x0010 (16) samr_QueryUserInfo: struct samr_QueryUserInfo out: struct samr_QueryUserInfo info : * info : union samr_UserInfo(case 16) info16: struct samr_UserInfo16 acct_flags : 0x00000100 (256) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 1: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK result : NT_STATUS_OK Testing QueryUserInfo level 17 samr_QueryUserInfo: struct samr_QueryUserInfo in: struct samr_QueryUserInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 381e5f07-a695-44b3-9c2d-bfd698786108 level : 0x0011 (17) samr_QueryUserInfo: struct samr_QueryUserInfo out: struct samr_QueryUserInfo info : * info : union samr_UserInfo(case 17) info17: struct samr_UserInfo17 acct_expiry : Wed Dec 31 19:00:00 1969 EST result : NT_STATUS_OK Testing QueryUserInfo level 20 samr_QueryUserInfo: struct samr_QueryUserInfo in: struct samr_QueryUserInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 381e5f07-a695-44b3-9c2d-bfd698786108 level : 0x0014 (20) samr_QueryUserInfo: struct samr_QueryUserInfo out: struct samr_QueryUserInfo info : * info : union samr_UserInfo(case 20) info20: struct samr_UserInfo20 parameters: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' result : NT_STATUS_OK Testing QueryUserInfo level 21 samr_QueryUserInfo: struct samr_QueryUserInfo in: struct samr_QueryUserInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 381e5f07-a695-44b3-9c2d-bfd698786108 level : 0x0015 (21) samr_QueryUserInfo: struct samr_QueryUserInfo out: struct samr_QueryUserInfo info : * info : union samr_UserInfo(case 21) info21: struct samr_UserInfo21 last_logon : Wed Dec 31 19:00:00 1969 EST last_logoff : Wed Dec 31 19:00:00 1969 EST last_password_change : Tue Jan 11 14:18:09 2005 EST acct_expiry : Wed Dec 31 19:00:00 1969 EST allow_password_change : Tue Jan 11 14:18:09 2005 EST force_password_change : Wed Feb 23 13:05:41 2005 EST account_name: struct samr_String length : 0x0014 (20) size : 0x0014 (20) string : * string : 'SPIN4BDC1$' full_name: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' home_directory: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' home_drive: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' logon_script: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' profile_path: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' description: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' workstations: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' comment: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' parameters: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' unknown1: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : NULL unknown2: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : NULL unknown3: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : NULL buf_count : 0x00000000 (0) buffer : NULL rid : 0x000003ea (1002) primary_gid : 0x00000201 (513) acct_flags : 0x00000100 (256) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 1: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK fields_present : 0x00ffffff (16777215) 1: SAMR_FIELD_NAME 1: SAMR_FIELD_DESCRIPTION 1: SAMR_FIELD_COMMENT 1: SAMR_FIELD_LOGON_SCRIPT 1: SAMR_FIELD_PROFILE_PATH 1: SAMR_FIELD_WORKSTATION 1: SAMR_FIELD_LOGON_HOURS 1: SAMR_FIELD_ACCT_FLAGS 1: SAMR_FIELD_PARAMETERS 1: SAMR_FIELD_COUNTRY_CODE 1: SAMR_FIELD_CODE_PAGE 0: SAMR_FIELD_PASSWORD 0: SAMR_FIELD_PASSWORD2 logon_hours: struct samr_LogonHours units_per_week : 0x00a8 (168) bits : * bits : ffffffffffffffffffffffffffffffffffffffffff bad_password_count : 0x0000 (0) logon_count : 0x0000 (0) country_code : 0x0000 (0) code_page : 0x0000 (0) nt_password_set : 0x00 (0) lm_password_set : 0x00 (0) password_expired : 0x00 (0) unknown4 : 0x00 (0) result : NT_STATUS_OK Testing QueryUserInfo2 level 1 samr_QueryUserInfo2: struct samr_QueryUserInfo2 in: struct samr_QueryUserInfo2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 381e5f07-a695-44b3-9c2d-bfd698786108 level : 0x0001 (1) samr_QueryUserInfo2: struct samr_QueryUserInfo2 out: struct samr_QueryUserInfo2 info : * info : union samr_UserInfo(case 1) info1: struct samr_UserInfo1 account_name: struct samr_String length : 0x0014 (20) size : 0x0014 (20) string : * string : 'SPIN4BDC1$' full_name: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' primary_gid : 0x00000201 (513) description: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' comment: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' result : NT_STATUS_OK Testing QueryUserInfo2 level 2 samr_QueryUserInfo2: struct samr_QueryUserInfo2 in: struct samr_QueryUserInfo2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 381e5f07-a695-44b3-9c2d-bfd698786108 level : 0x0002 (2) samr_QueryUserInfo2: struct samr_QueryUserInfo2 out: struct samr_QueryUserInfo2 info : * info : union samr_UserInfo(case 2) info2: struct samr_UserInfo2 comment: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' unknown: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : NULL country_code : 0x0000 (0) code_page : 0x0000 (0) result : NT_STATUS_OK Testing QueryUserInfo2 level 3 samr_QueryUserInfo2: struct samr_QueryUserInfo2 in: struct samr_QueryUserInfo2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 381e5f07-a695-44b3-9c2d-bfd698786108 level : 0x0003 (3) samr_QueryUserInfo2: struct samr_QueryUserInfo2 out: struct samr_QueryUserInfo2 info : * info : union samr_UserInfo(case 3) info3: struct samr_UserInfo3 account_name: struct samr_String length : 0x0014 (20) size : 0x0014 (20) string : * string : 'SPIN4BDC1$' full_name: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' rid : 0x000003ea (1002) primary_gid : 0x00000201 (513) home_directory: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' home_drive: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' logon_script: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' profile_path: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' workstations: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' last_logon : Wed Dec 31 19:00:00 1969 EST last_logoff : Wed Dec 31 19:00:00 1969 EST last_password_change : Tue Jan 11 14:18:09 2005 EST allow_password_change : Tue Jan 11 14:18:09 2005 EST force_password_change : Wed Feb 23 13:05:41 2005 EST logon_hours: struct samr_LogonHours units_per_week : 0x00a8 (168) bits : * bits : ffffffffffffffffffffffffffffffffffffffffff bad_password_count : 0x0000 (0) logon_count : 0x0000 (0) acct_flags : 0x00000100 (256) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 1: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK result : NT_STATUS_OK Testing QueryUserInfo2 level 4 samr_QueryUserInfo2: struct samr_QueryUserInfo2 in: struct samr_QueryUserInfo2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 381e5f07-a695-44b3-9c2d-bfd698786108 level : 0x0004 (4) samr_QueryUserInfo2: struct samr_QueryUserInfo2 out: struct samr_QueryUserInfo2 info : * info : union samr_UserInfo(case 4) info4: struct samr_UserInfo4 logon_hours: struct samr_LogonHours units_per_week : 0x00a8 (168) bits : * bits : ffffffffffffffffffffffffffffffffffffffffff result : NT_STATUS_OK Testing QueryUserInfo2 level 5 samr_QueryUserInfo2: struct samr_QueryUserInfo2 in: struct samr_QueryUserInfo2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 381e5f07-a695-44b3-9c2d-bfd698786108 level : 0x0005 (5) samr_QueryUserInfo2: struct samr_QueryUserInfo2 out: struct samr_QueryUserInfo2 info : * info : union samr_UserInfo(case 5) info5: struct samr_UserInfo5 account_name: struct samr_String length : 0x0014 (20) size : 0x0014 (20) string : * string : 'SPIN4BDC1$' full_name: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' rid : 0x000003ea (1002) primary_gid : 0x00000201 (513) home_directory: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' home_drive: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' logon_script: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' profile_path: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' description: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' workstations: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' last_logon : Wed Dec 31 19:00:00 1969 EST last_logoff : Wed Dec 31 19:00:00 1969 EST logon_hours: struct samr_LogonHours units_per_week : 0x00a8 (168) bits : * bits : ffffffffffffffffffffffffffffffffffffffffff bad_password_count : 0x0000 (0) logon_count : 0x0000 (0) last_password_change : Tue Jan 11 14:18:09 2005 EST acct_expiry : Wed Dec 31 19:00:00 1969 EST acct_flags : 0x00000100 (256) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 1: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK result : NT_STATUS_OK Testing QueryUserInfo2 level 6 samr_QueryUserInfo2: struct samr_QueryUserInfo2 in: struct samr_QueryUserInfo2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 381e5f07-a695-44b3-9c2d-bfd698786108 level : 0x0006 (6) samr_QueryUserInfo2: struct samr_QueryUserInfo2 out: struct samr_QueryUserInfo2 info : * info : union samr_UserInfo(case 6) info6: struct samr_UserInfo6 account_name: struct samr_String length : 0x0014 (20) size : 0x0014 (20) string : * string : 'SPIN4BDC1$' full_name: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' result : NT_STATUS_OK Testing QueryUserInfo2 level 7 samr_QueryUserInfo2: struct samr_QueryUserInfo2 in: struct samr_QueryUserInfo2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 381e5f07-a695-44b3-9c2d-bfd698786108 level : 0x0007 (7) samr_QueryUserInfo2: struct samr_QueryUserInfo2 out: struct samr_QueryUserInfo2 info : * info : union samr_UserInfo(case 7) info7: struct samr_UserInfo7 account_name: struct samr_String length : 0x0014 (20) size : 0x0014 (20) string : * string : 'SPIN4BDC1$' result : NT_STATUS_OK Testing QueryUserInfo2 level 8 samr_QueryUserInfo2: struct samr_QueryUserInfo2 in: struct samr_QueryUserInfo2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 381e5f07-a695-44b3-9c2d-bfd698786108 level : 0x0008 (8) samr_QueryUserInfo2: struct samr_QueryUserInfo2 out: struct samr_QueryUserInfo2 info : * info : union samr_UserInfo(case 8) info8: struct samr_UserInfo8 full_name: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' result : NT_STATUS_OK Testing QueryUserInfo2 level 9 samr_QueryUserInfo2: struct samr_QueryUserInfo2 in: struct samr_QueryUserInfo2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 381e5f07-a695-44b3-9c2d-bfd698786108 level : 0x0009 (9) samr_QueryUserInfo2: struct samr_QueryUserInfo2 out: struct samr_QueryUserInfo2 info : * info : union samr_UserInfo(case 9) info9: struct samr_UserInfo9 primary_gid : 0x00000201 (513) result : NT_STATUS_OK Testing QueryUserInfo2 level 10 samr_QueryUserInfo2: struct samr_QueryUserInfo2 in: struct samr_QueryUserInfo2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 381e5f07-a695-44b3-9c2d-bfd698786108 level : 0x000a (10) samr_QueryUserInfo2: struct samr_QueryUserInfo2 out: struct samr_QueryUserInfo2 info : * info : union samr_UserInfo(case 10) info10: struct samr_UserInfo10 home_directory: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' home_drive: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' result : NT_STATUS_OK Testing QueryUserInfo2 level 11 samr_QueryUserInfo2: struct samr_QueryUserInfo2 in: struct samr_QueryUserInfo2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 381e5f07-a695-44b3-9c2d-bfd698786108 level : 0x000b (11) samr_QueryUserInfo2: struct samr_QueryUserInfo2 out: struct samr_QueryUserInfo2 info : * info : union samr_UserInfo(case 11) info11: struct samr_UserInfo11 logon_script: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' result : NT_STATUS_OK Testing QueryUserInfo2 level 12 samr_QueryUserInfo2: struct samr_QueryUserInfo2 in: struct samr_QueryUserInfo2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 381e5f07-a695-44b3-9c2d-bfd698786108 level : 0x000c (12) samr_QueryUserInfo2: struct samr_QueryUserInfo2 out: struct samr_QueryUserInfo2 info : * info : union samr_UserInfo(case 12) info12: struct samr_UserInfo12 profile_path: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' result : NT_STATUS_OK Testing QueryUserInfo2 level 13 samr_QueryUserInfo2: struct samr_QueryUserInfo2 in: struct samr_QueryUserInfo2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 381e5f07-a695-44b3-9c2d-bfd698786108 level : 0x000d (13) samr_QueryUserInfo2: struct samr_QueryUserInfo2 out: struct samr_QueryUserInfo2 info : * info : union samr_UserInfo(case 13) info13: struct samr_UserInfo13 description: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' result : NT_STATUS_OK Testing QueryUserInfo2 level 14 samr_QueryUserInfo2: struct samr_QueryUserInfo2 in: struct samr_QueryUserInfo2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 381e5f07-a695-44b3-9c2d-bfd698786108 level : 0x000e (14) samr_QueryUserInfo2: struct samr_QueryUserInfo2 out: struct samr_QueryUserInfo2 info : * info : union samr_UserInfo(case 14) info14: struct samr_UserInfo14 workstations: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' result : NT_STATUS_OK Testing QueryUserInfo2 level 16 samr_QueryUserInfo2: struct samr_QueryUserInfo2 in: struct samr_QueryUserInfo2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 381e5f07-a695-44b3-9c2d-bfd698786108 level : 0x0010 (16) samr_QueryUserInfo2: struct samr_QueryUserInfo2 out: struct samr_QueryUserInfo2 info : * info : union samr_UserInfo(case 16) info16: struct samr_UserInfo16 acct_flags : 0x00000100 (256) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 1: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK result : NT_STATUS_OK Testing QueryUserInfo2 level 17 samr_QueryUserInfo2: struct samr_QueryUserInfo2 in: struct samr_QueryUserInfo2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 381e5f07-a695-44b3-9c2d-bfd698786108 level : 0x0011 (17) samr_QueryUserInfo2: struct samr_QueryUserInfo2 out: struct samr_QueryUserInfo2 info : * info : union samr_UserInfo(case 17) info17: struct samr_UserInfo17 acct_expiry : Wed Dec 31 19:00:00 1969 EST result : NT_STATUS_OK Testing QueryUserInfo2 level 20 samr_QueryUserInfo2: struct samr_QueryUserInfo2 in: struct samr_QueryUserInfo2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 381e5f07-a695-44b3-9c2d-bfd698786108 level : 0x0014 (20) samr_QueryUserInfo2: struct samr_QueryUserInfo2 out: struct samr_QueryUserInfo2 info : * info : union samr_UserInfo(case 20) info20: struct samr_UserInfo20 parameters: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' result : NT_STATUS_OK Testing QueryUserInfo2 level 21 samr_QueryUserInfo2: struct samr_QueryUserInfo2 in: struct samr_QueryUserInfo2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 381e5f07-a695-44b3-9c2d-bfd698786108 level : 0x0015 (21) samr_QueryUserInfo2: struct samr_QueryUserInfo2 out: struct samr_QueryUserInfo2 info : * info : union samr_UserInfo(case 21) info21: struct samr_UserInfo21 last_logon : Wed Dec 31 19:00:00 1969 EST last_logoff : Wed Dec 31 19:00:00 1969 EST last_password_change : Tue Jan 11 14:18:09 2005 EST acct_expiry : Wed Dec 31 19:00:00 1969 EST allow_password_change : Tue Jan 11 14:18:09 2005 EST force_password_change : Wed Feb 23 13:05:41 2005 EST account_name: struct samr_String length : 0x0014 (20) size : 0x0014 (20) string : * string : 'SPIN4BDC1$' full_name: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' home_directory: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' home_drive: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' logon_script: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' profile_path: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' description: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' workstations: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' comment: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' parameters: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' unknown1: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : NULL unknown2: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : NULL unknown3: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : NULL buf_count : 0x00000000 (0) buffer : NULL rid : 0x000003ea (1002) primary_gid : 0x00000201 (513) acct_flags : 0x00000100 (256) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 1: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK fields_present : 0x00ffffff (16777215) 1: SAMR_FIELD_NAME 1: SAMR_FIELD_DESCRIPTION 1: SAMR_FIELD_COMMENT 1: SAMR_FIELD_LOGON_SCRIPT 1: SAMR_FIELD_PROFILE_PATH 1: SAMR_FIELD_WORKSTATION 1: SAMR_FIELD_LOGON_HOURS 1: SAMR_FIELD_ACCT_FLAGS 1: SAMR_FIELD_PARAMETERS 1: SAMR_FIELD_COUNTRY_CODE 1: SAMR_FIELD_CODE_PAGE 0: SAMR_FIELD_PASSWORD 0: SAMR_FIELD_PASSWORD2 logon_hours: struct samr_LogonHours units_per_week : 0x00a8 (168) bits : * bits : ffffffffffffffffffffffffffffffffffffffffff bad_password_count : 0x0000 (0) logon_count : 0x0000 (0) country_code : 0x0000 (0) code_page : 0x0000 (0) nt_password_set : 0x00 (0) lm_password_set : 0x00 (0) password_expired : 0x00 (0) unknown4 : 0x00 (0) result : NT_STATUS_OK Testing GetUserPwInfo samr_GetUserPwInfo: struct samr_GetUserPwInfo in: struct samr_GetUserPwInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 381e5f07-a695-44b3-9c2d-bfd698786108 samr_GetUserPwInfo: struct samr_GetUserPwInfo out: struct samr_GetUserPwInfo info: struct samr_PwInfo min_password_length : 0x0000 (0) password_properties : 0x00000000 (0) result : NT_STATUS_OK testing GetGroupsForUser samr_GetGroupsForUser: struct samr_GetGroupsForUser in: struct samr_GetGroupsForUser user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 381e5f07-a695-44b3-9c2d-bfd698786108 samr_GetGroupsForUser: struct samr_GetGroupsForUser out: struct samr_GetGroupsForUser rids : * rids: struct samr_RidArray count : 0x00000001 (1) rid : * rid: ARRAY(1) [0]: struct samr_RidType rid : 0x00000201 (513) type : 0x00000007 (7) result : NT_STATUS_OK samr_Close: struct samr_Close in: struct samr_Close handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 381e5f07-a695-44b3-9c2d-bfd698786108 samr_Close: struct samr_Close out: struct samr_Close handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : NT_STATUS_OK Testing LookupNames samr_LookupNames: struct samr_LookupNames in: struct samr_LookupNames domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f num_names : 0x00000003 (3) names : * names: ARRAY(3) [0]: struct samr_String length : 0x001a (26) size : 0x001a (26) string : * string : 'Administrator' [1]: struct samr_String length : 0x000a (10) size : 0x000a (10) string : * string : 'Guest' [2]: struct samr_String length : 0x0014 (20) size : 0x0014 (20) string : * string : 'SPIN4BDC1$' samr_LookupNames: struct samr_LookupNames out: struct samr_LookupNames rids: struct samr_Ids count : 0x00000003 (3) ids : * ids: ARRAY(3) [0] : 0x000001f4 (500) [1] : 0x000001f5 (501) [2] : 0x000003ea (1002) types: struct samr_Ids count : 0x00000003 (3) ids : * ids: ARRAY(3) [0] : 0x00000001 (1) [1] : 0x00000001 (1) [2] : 0x00000001 (1) result : NT_STATUS_OK Testing LookupRids samr_LookupRids: struct samr_LookupRids in: struct samr_LookupRids domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f num_rids : 0x00000003 (3) rids : * rids: ARRAY(3) [0] : 0x000001f4 (500) [1] : 0x000001f5 (501) [2] : 0x000003ea (1002) samr_LookupRids: struct samr_LookupRids out: struct samr_LookupRids names: struct samr_Strings count : 0x00000003 (3) names : * names: ARRAY(3) [0]: struct samr_String length : 0x001a (26) size : 0x001a (26) string : * string : 'Administrator' [1]: struct samr_String length : 0x000a (10) size : 0x000a (10) string : * string : 'Guest' [2]: struct samr_String length : 0x0014 (20) size : 0x0014 (20) string : * string : 'SPIN4BDC1$' types: struct samr_Ids count : 0x00000003 (3) ids : * ids: ARRAY(3) [0] : 0x00000001 (1) [1] : 0x00000001 (1) [2] : 0x00000001 (1) result : NT_STATUS_OK samr async test disabled - enable dangerous tests to use Testing EnumDomainGroups samr_EnumDomainGroups: struct samr_EnumDomainGroups in: struct samr_EnumDomainGroups domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f resume_handle : * resume_handle : 0x00000000 (0) max_size : 0xffffffff (4294967295) samr_EnumDomainGroups: struct samr_EnumDomainGroups out: struct samr_EnumDomainGroups resume_handle : * resume_handle : 0x00000003 (3) sam : * sam: struct samr_SamArray count : 0x00000003 (3) entries : * entries: ARRAY(3) [0]: struct samr_SamEntry idx : 0x00000200 (512) name: struct samr_String length : 0x001a (26) size : 0x0020 (32) string : * string : 'Domain Admins' [1]: struct samr_SamEntry idx : 0x00000202 (514) name: struct samr_String length : 0x001a (26) size : 0x0020 (32) string : * string : 'Domain Guests' [2]: struct samr_SamEntry idx : 0x00000201 (513) name: struct samr_String length : 0x0018 (24) size : 0x0020 (32) string : * string : 'Domain Users' num_entries : 0x00000003 (3) result : NT_STATUS_OK Testing OpenGroup(512) samr_OpenGroup: struct samr_OpenGroup in: struct samr_OpenGroup domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f access_mask : 0x02000000 (33554432) rid : 0x00000200 (512) samr_OpenGroup: struct samr_OpenGroup out: struct samr_OpenGroup group_handle : * group_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 35fba752-7ad3-49df-8917-3a49e7c9fb8a result : NT_STATUS_OK samr_QuerySecurity: struct samr_QuerySecurity in: struct samr_QuerySecurity handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 35fba752-7ad3-49df-8917-3a49e7c9fb8a sec_info : 0x00000007 (7) samr_QuerySecurity: struct samr_QuerySecurity out: struct samr_QuerySecurity sdbuf : * sdbuf: struct sec_desc_buf sd_size : 0x00000068 (104) sd : * sd: struct security_descriptor revision : SEC_DESC_REVISION_1 (1) type : 0x8004 (32772) 0: SEC_DESC_OWNER_DEFAULTED 0: SEC_DESC_GROUP_DEFAULTED 1: SEC_DESC_DACL_PRESENT 0: SEC_DESC_DACL_DEFAULTED 0: SEC_DESC_SACL_PRESENT 0: SEC_DESC_SACL_DEFAULTED 0: SEC_DESC_DACL_TRUSTED 0: SEC_DESC_SERVER_SECURITY 0: SEC_DESC_DACL_AUTO_INHERIT_REQ 0: SEC_DESC_SACL_AUTO_INHERIT_REQ 0: SEC_DESC_DACL_AUTO_INHERITED 0: SEC_DESC_SACL_AUTO_INHERITED 0: SEC_DESC_DACL_PROTECTED 0: SEC_DESC_SACL_PROTECTED 0: SEC_DESC_RM_CONTROL_VALID 1: SEC_DESC_SELF_RELATIVE owner_sid : * owner_sid : S-1-5-32-544 group_sid : * group_sid : S-1-5-32-544 sacl : * sacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0034 (52) num_aces : 0x00000002 (2) aces : * aces: ARRAY(2) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x00020011 (131089) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 dacl : * dacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0034 (52) num_aces : 0x00000002 (2) aces : * aces: ARRAY(2) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x00020011 (131089) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 result : NT_STATUS_OK samr_SetSecurity: struct samr_SetSecurity in: struct samr_SetSecurity handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 35fba752-7ad3-49df-8917-3a49e7c9fb8a sec_info : 0x00000007 (7) sdbuf : * sdbuf: struct sec_desc_buf sd_size : 0x0000009c (156) sd : * sd: struct security_descriptor revision : SEC_DESC_REVISION_1 (1) type : 0x8004 (32772) 0: SEC_DESC_OWNER_DEFAULTED 0: SEC_DESC_GROUP_DEFAULTED 1: SEC_DESC_DACL_PRESENT 0: SEC_DESC_DACL_DEFAULTED 0: SEC_DESC_SACL_PRESENT 0: SEC_DESC_SACL_DEFAULTED 0: SEC_DESC_DACL_TRUSTED 0: SEC_DESC_SERVER_SECURITY 0: SEC_DESC_DACL_AUTO_INHERIT_REQ 0: SEC_DESC_SACL_AUTO_INHERIT_REQ 0: SEC_DESC_DACL_AUTO_INHERITED 0: SEC_DESC_SACL_AUTO_INHERITED 0: SEC_DESC_DACL_PROTECTED 0: SEC_DESC_SACL_PROTECTED 0: SEC_DESC_RM_CONTROL_VALID 1: SEC_DESC_SELF_RELATIVE owner_sid : * owner_sid : S-1-5-32-544 group_sid : * group_sid : S-1-5-32-544 sacl : * sacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0034 (52) num_aces : 0x00000002 (2) aces : * aces: ARRAY(2) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x00020011 (131089) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 dacl : * dacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0034 (52) num_aces : 0x00000002 (2) aces : * aces: ARRAY(2) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x00020011 (131089) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 samr_SetSecurity: struct samr_SetSecurity out: struct samr_SetSecurity result : NT_STATUS_OK samr_QuerySecurity: struct samr_QuerySecurity in: struct samr_QuerySecurity handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 35fba752-7ad3-49df-8917-3a49e7c9fb8a sec_info : 0x00000007 (7) samr_QuerySecurity: struct samr_QuerySecurity out: struct samr_QuerySecurity sdbuf : * sdbuf: struct sec_desc_buf sd_size : 0x00000068 (104) sd : * sd: struct security_descriptor revision : SEC_DESC_REVISION_1 (1) type : 0x8004 (32772) 0: SEC_DESC_OWNER_DEFAULTED 0: SEC_DESC_GROUP_DEFAULTED 1: SEC_DESC_DACL_PRESENT 0: SEC_DESC_DACL_DEFAULTED 0: SEC_DESC_SACL_PRESENT 0: SEC_DESC_SACL_DEFAULTED 0: SEC_DESC_DACL_TRUSTED 0: SEC_DESC_SERVER_SECURITY 0: SEC_DESC_DACL_AUTO_INHERIT_REQ 0: SEC_DESC_SACL_AUTO_INHERIT_REQ 0: SEC_DESC_DACL_AUTO_INHERITED 0: SEC_DESC_SACL_AUTO_INHERITED 0: SEC_DESC_DACL_PROTECTED 0: SEC_DESC_SACL_PROTECTED 0: SEC_DESC_RM_CONTROL_VALID 1: SEC_DESC_SELF_RELATIVE owner_sid : * owner_sid : S-1-5-32-544 group_sid : * group_sid : S-1-5-32-544 sacl : * sacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0034 (52) num_aces : 0x00000002 (2) aces : * aces: ARRAY(2) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x00020011 (131089) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 dacl : * dacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0034 (52) num_aces : 0x00000002 (2) aces : * aces: ARRAY(2) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x00020011 (131089) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 result : NT_STATUS_OK Testing QueryGroupInfo level 1 samr_QueryGroupInfo: struct samr_QueryGroupInfo in: struct samr_QueryGroupInfo group_handle : * group_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 35fba752-7ad3-49df-8917-3a49e7c9fb8a level : GroupInfoAll (1) samr_QueryGroupInfo: struct samr_QueryGroupInfo out: struct samr_QueryGroupInfo info : * info : union samr_GroupInfo(case 1) all: struct samr_GroupInfoAll name: struct samr_String length : 0x001a (26) size : 0x001a (26) string : * string : 'Domain Admins' attributes : 0x00000007 (7) num_members : 0x00000001 (1) description: struct samr_String length : 0x004e (78) size : 0x004e (78) string : * string : 'Designated administrators of the domain' result : NT_STATUS_OK Testing QueryGroupInfo level 2 samr_QueryGroupInfo: struct samr_QueryGroupInfo in: struct samr_QueryGroupInfo group_handle : * group_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 35fba752-7ad3-49df-8917-3a49e7c9fb8a level : GroupInfoName (2) samr_QueryGroupInfo: struct samr_QueryGroupInfo out: struct samr_QueryGroupInfo info : * info : union samr_GroupInfo(case 2) name: struct samr_String length : 0x001a (26) size : 0x001a (26) string : * string : 'Domain Admins' result : NT_STATUS_OK Testing QueryGroupInfo level 3 samr_QueryGroupInfo: struct samr_QueryGroupInfo in: struct samr_QueryGroupInfo group_handle : * group_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 35fba752-7ad3-49df-8917-3a49e7c9fb8a level : GroupInfoX (3) samr_QueryGroupInfo: struct samr_QueryGroupInfo out: struct samr_QueryGroupInfo info : * info : union samr_GroupInfo(case 3) unknown: struct samr_GroupInfoX unknown : 0x00000007 (7) result : NT_STATUS_OK Testing QueryGroupInfo level 4 samr_QueryGroupInfo: struct samr_QueryGroupInfo in: struct samr_QueryGroupInfo group_handle : * group_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 35fba752-7ad3-49df-8917-3a49e7c9fb8a level : GroupInfoDescription (4) samr_QueryGroupInfo: struct samr_QueryGroupInfo out: struct samr_QueryGroupInfo info : * info : union samr_GroupInfo(case 4) description: struct samr_String length : 0x004e (78) size : 0x004e (78) string : * string : 'Designated administrators of the domain' result : NT_STATUS_OK Testing QueryGroupInfo level 5 samr_QueryGroupInfo: struct samr_QueryGroupInfo in: struct samr_QueryGroupInfo group_handle : * group_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 35fba752-7ad3-49df-8917-3a49e7c9fb8a level : GroupInfoAll2 (5) samr_QueryGroupInfo: struct samr_QueryGroupInfo out: struct samr_QueryGroupInfo info : NULL result : NT_STATUS_INVALID_INFO_CLASS QueryGroupInfo level 5 failed - NT_STATUS_INVALID_INFO_CLASS Testing QueryGroupMember samr_QueryGroupMember: struct samr_QueryGroupMember in: struct samr_QueryGroupMember group_handle : * group_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 35fba752-7ad3-49df-8917-3a49e7c9fb8a samr_QueryGroupMember: struct samr_QueryGroupMember out: struct samr_QueryGroupMember rids : * rids: struct samr_ridArray count : 0x00000001 (1) rids : * rids: ARRAY(1) [0] : 0x000001f4 (500) unknown : * unknown: ARRAY(1) [0] : 0x00000007 (7) result : NT_STATUS_OK samr_Close: struct samr_Close in: struct samr_Close handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 35fba752-7ad3-49df-8917-3a49e7c9fb8a samr_Close: struct samr_Close out: struct samr_Close handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : NT_STATUS_OK Testing OpenGroup(514) samr_OpenGroup: struct samr_OpenGroup in: struct samr_OpenGroup domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f access_mask : 0x02000000 (33554432) rid : 0x00000202 (514) samr_OpenGroup: struct samr_OpenGroup out: struct samr_OpenGroup group_handle : * group_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 6752eab2-d18c-4053-bd65-5d4c96190019 result : NT_STATUS_OK samr_QuerySecurity: struct samr_QuerySecurity in: struct samr_QuerySecurity handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 6752eab2-d18c-4053-bd65-5d4c96190019 sec_info : 0x00000007 (7) samr_QuerySecurity: struct samr_QuerySecurity out: struct samr_QuerySecurity sdbuf : * sdbuf: struct sec_desc_buf sd_size : 0x00000080 (128) sd : * sd: struct security_descriptor revision : SEC_DESC_REVISION_1 (1) type : 0x8004 (32772) 0: SEC_DESC_OWNER_DEFAULTED 0: SEC_DESC_GROUP_DEFAULTED 1: SEC_DESC_DACL_PRESENT 0: SEC_DESC_DACL_DEFAULTED 0: SEC_DESC_SACL_PRESENT 0: SEC_DESC_SACL_DEFAULTED 0: SEC_DESC_DACL_TRUSTED 0: SEC_DESC_SERVER_SECURITY 0: SEC_DESC_DACL_AUTO_INHERIT_REQ 0: SEC_DESC_SACL_AUTO_INHERIT_REQ 0: SEC_DESC_DACL_AUTO_INHERITED 0: SEC_DESC_SACL_AUTO_INHERITED 0: SEC_DESC_DACL_PROTECTED 0: SEC_DESC_SACL_PROTECTED 0: SEC_DESC_RM_CONTROL_VALID 1: SEC_DESC_SELF_RELATIVE owner_sid : * owner_sid : S-1-5-32-544 group_sid : * group_sid : S-1-5-32-544 sacl : * sacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x004c (76) num_aces : 0x00000003 (3) aces : * aces: ARRAY(3) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x00020011 (131089) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 [2]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-548 dacl : * dacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x004c (76) num_aces : 0x00000003 (3) aces : * aces: ARRAY(3) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x00020011 (131089) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 [2]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-548 result : NT_STATUS_OK samr_SetSecurity: struct samr_SetSecurity in: struct samr_SetSecurity handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 6752eab2-d18c-4053-bd65-5d4c96190019 sec_info : 0x00000007 (7) sdbuf : * sdbuf: struct sec_desc_buf sd_size : 0x000000cc (204) sd : * sd: struct security_descriptor revision : SEC_DESC_REVISION_1 (1) type : 0x8004 (32772) 0: SEC_DESC_OWNER_DEFAULTED 0: SEC_DESC_GROUP_DEFAULTED 1: SEC_DESC_DACL_PRESENT 0: SEC_DESC_DACL_DEFAULTED 0: SEC_DESC_SACL_PRESENT 0: SEC_DESC_SACL_DEFAULTED 0: SEC_DESC_DACL_TRUSTED 0: SEC_DESC_SERVER_SECURITY 0: SEC_DESC_DACL_AUTO_INHERIT_REQ 0: SEC_DESC_SACL_AUTO_INHERIT_REQ 0: SEC_DESC_DACL_AUTO_INHERITED 0: SEC_DESC_SACL_AUTO_INHERITED 0: SEC_DESC_DACL_PROTECTED 0: SEC_DESC_SACL_PROTECTED 0: SEC_DESC_RM_CONTROL_VALID 1: SEC_DESC_SELF_RELATIVE owner_sid : * owner_sid : S-1-5-32-544 group_sid : * group_sid : S-1-5-32-544 sacl : * sacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x004c (76) num_aces : 0x00000003 (3) aces : * aces: ARRAY(3) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x00020011 (131089) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 [2]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-548 dacl : * dacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x004c (76) num_aces : 0x00000003 (3) aces : * aces: ARRAY(3) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x00020011 (131089) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 [2]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-548 samr_SetSecurity: struct samr_SetSecurity out: struct samr_SetSecurity result : NT_STATUS_OK samr_QuerySecurity: struct samr_QuerySecurity in: struct samr_QuerySecurity handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 6752eab2-d18c-4053-bd65-5d4c96190019 sec_info : 0x00000007 (7) samr_QuerySecurity: struct samr_QuerySecurity out: struct samr_QuerySecurity sdbuf : * sdbuf: struct sec_desc_buf sd_size : 0x00000080 (128) sd : * sd: struct security_descriptor revision : SEC_DESC_REVISION_1 (1) type : 0x8004 (32772) 0: SEC_DESC_OWNER_DEFAULTED 0: SEC_DESC_GROUP_DEFAULTED 1: SEC_DESC_DACL_PRESENT 0: SEC_DESC_DACL_DEFAULTED 0: SEC_DESC_SACL_PRESENT 0: SEC_DESC_SACL_DEFAULTED 0: SEC_DESC_DACL_TRUSTED 0: SEC_DESC_SERVER_SECURITY 0: SEC_DESC_DACL_AUTO_INHERIT_REQ 0: SEC_DESC_SACL_AUTO_INHERIT_REQ 0: SEC_DESC_DACL_AUTO_INHERITED 0: SEC_DESC_SACL_AUTO_INHERITED 0: SEC_DESC_DACL_PROTECTED 0: SEC_DESC_SACL_PROTECTED 0: SEC_DESC_RM_CONTROL_VALID 1: SEC_DESC_SELF_RELATIVE owner_sid : * owner_sid : S-1-5-32-544 group_sid : * group_sid : S-1-5-32-544 sacl : * sacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x004c (76) num_aces : 0x00000003 (3) aces : * aces: ARRAY(3) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x00020011 (131089) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 [2]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-548 dacl : * dacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x004c (76) num_aces : 0x00000003 (3) aces : * aces: ARRAY(3) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x00020011 (131089) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 [2]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-548 result : NT_STATUS_OK Testing QueryGroupInfo level 1 samr_QueryGroupInfo: struct samr_QueryGroupInfo in: struct samr_QueryGroupInfo group_handle : * group_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 6752eab2-d18c-4053-bd65-5d4c96190019 level : GroupInfoAll (1) samr_QueryGroupInfo: struct samr_QueryGroupInfo out: struct samr_QueryGroupInfo info : * info : union samr_GroupInfo(case 1) all: struct samr_GroupInfoAll name: struct samr_String length : 0x001a (26) size : 0x001a (26) string : * string : 'Domain Guests' attributes : 0x00000007 (7) num_members : 0x00000001 (1) description: struct samr_String length : 0x0022 (34) size : 0x0022 (34) string : * string : 'All domain guests' result : NT_STATUS_OK Testing QueryGroupInfo level 2 samr_QueryGroupInfo: struct samr_QueryGroupInfo in: struct samr_QueryGroupInfo group_handle : * group_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 6752eab2-d18c-4053-bd65-5d4c96190019 level : GroupInfoName (2) samr_QueryGroupInfo: struct samr_QueryGroupInfo out: struct samr_QueryGroupInfo info : * info : union samr_GroupInfo(case 2) name: struct samr_String length : 0x001a (26) size : 0x001a (26) string : * string : 'Domain Guests' result : NT_STATUS_OK Testing QueryGroupInfo level 3 samr_QueryGroupInfo: struct samr_QueryGroupInfo in: struct samr_QueryGroupInfo group_handle : * group_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 6752eab2-d18c-4053-bd65-5d4c96190019 level : GroupInfoX (3) samr_QueryGroupInfo: struct samr_QueryGroupInfo out: struct samr_QueryGroupInfo info : * info : union samr_GroupInfo(case 3) unknown: struct samr_GroupInfoX unknown : 0x00000007 (7) result : NT_STATUS_OK Testing QueryGroupInfo level 4 samr_QueryGroupInfo: struct samr_QueryGroupInfo in: struct samr_QueryGroupInfo group_handle : * group_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 6752eab2-d18c-4053-bd65-5d4c96190019 level : GroupInfoDescription (4) samr_QueryGroupInfo: struct samr_QueryGroupInfo out: struct samr_QueryGroupInfo info : * info : union samr_GroupInfo(case 4) description: struct samr_String length : 0x0022 (34) size : 0x0022 (34) string : * string : 'All domain guests' result : NT_STATUS_OK Testing QueryGroupInfo level 5 samr_QueryGroupInfo: struct samr_QueryGroupInfo in: struct samr_QueryGroupInfo group_handle : * group_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 6752eab2-d18c-4053-bd65-5d4c96190019 level : GroupInfoAll2 (5) samr_QueryGroupInfo: struct samr_QueryGroupInfo out: struct samr_QueryGroupInfo info : NULL result : NT_STATUS_INVALID_INFO_CLASS QueryGroupInfo level 5 failed - NT_STATUS_INVALID_INFO_CLASS Testing QueryGroupMember samr_QueryGroupMember: struct samr_QueryGroupMember in: struct samr_QueryGroupMember group_handle : * group_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 6752eab2-d18c-4053-bd65-5d4c96190019 samr_QueryGroupMember: struct samr_QueryGroupMember out: struct samr_QueryGroupMember rids : * rids: struct samr_ridArray count : 0x00000001 (1) rids : * rids: ARRAY(1) [0] : 0x000001f5 (501) unknown : * unknown: ARRAY(1) [0] : 0x00000007 (7) result : NT_STATUS_OK samr_Close: struct samr_Close in: struct samr_Close handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 6752eab2-d18c-4053-bd65-5d4c96190019 samr_Close: struct samr_Close out: struct samr_Close handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : NT_STATUS_OK Testing OpenGroup(513) samr_OpenGroup: struct samr_OpenGroup in: struct samr_OpenGroup domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f access_mask : 0x02000000 (33554432) rid : 0x00000201 (513) samr_OpenGroup: struct samr_OpenGroup out: struct samr_OpenGroup group_handle : * group_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : dab22eb6-9cc9-4b5b-906e-586fd38d6b31 result : NT_STATUS_OK samr_QuerySecurity: struct samr_QuerySecurity in: struct samr_QuerySecurity handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : dab22eb6-9cc9-4b5b-906e-586fd38d6b31 sec_info : 0x00000007 (7) samr_QuerySecurity: struct samr_QuerySecurity out: struct samr_QuerySecurity sdbuf : * sdbuf: struct sec_desc_buf sd_size : 0x00000080 (128) sd : * sd: struct security_descriptor revision : SEC_DESC_REVISION_1 (1) type : 0x8004 (32772) 0: SEC_DESC_OWNER_DEFAULTED 0: SEC_DESC_GROUP_DEFAULTED 1: SEC_DESC_DACL_PRESENT 0: SEC_DESC_DACL_DEFAULTED 0: SEC_DESC_SACL_PRESENT 0: SEC_DESC_SACL_DEFAULTED 0: SEC_DESC_DACL_TRUSTED 0: SEC_DESC_SERVER_SECURITY 0: SEC_DESC_DACL_AUTO_INHERIT_REQ 0: SEC_DESC_SACL_AUTO_INHERIT_REQ 0: SEC_DESC_DACL_AUTO_INHERITED 0: SEC_DESC_SACL_AUTO_INHERITED 0: SEC_DESC_DACL_PROTECTED 0: SEC_DESC_SACL_PROTECTED 0: SEC_DESC_RM_CONTROL_VALID 1: SEC_DESC_SELF_RELATIVE owner_sid : * owner_sid : S-1-5-32-544 group_sid : * group_sid : S-1-5-32-544 sacl : * sacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x004c (76) num_aces : 0x00000003 (3) aces : * aces: ARRAY(3) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x00020011 (131089) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 [2]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-548 dacl : * dacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x004c (76) num_aces : 0x00000003 (3) aces : * aces: ARRAY(3) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x00020011 (131089) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 [2]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-548 result : NT_STATUS_OK samr_SetSecurity: struct samr_SetSecurity in: struct samr_SetSecurity handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : dab22eb6-9cc9-4b5b-906e-586fd38d6b31 sec_info : 0x00000007 (7) sdbuf : * sdbuf: struct sec_desc_buf sd_size : 0x000000cc (204) sd : * sd: struct security_descriptor revision : SEC_DESC_REVISION_1 (1) type : 0x8004 (32772) 0: SEC_DESC_OWNER_DEFAULTED 0: SEC_DESC_GROUP_DEFAULTED 1: SEC_DESC_DACL_PRESENT 0: SEC_DESC_DACL_DEFAULTED 0: SEC_DESC_SACL_PRESENT 0: SEC_DESC_SACL_DEFAULTED 0: SEC_DESC_DACL_TRUSTED 0: SEC_DESC_SERVER_SECURITY 0: SEC_DESC_DACL_AUTO_INHERIT_REQ 0: SEC_DESC_SACL_AUTO_INHERIT_REQ 0: SEC_DESC_DACL_AUTO_INHERITED 0: SEC_DESC_SACL_AUTO_INHERITED 0: SEC_DESC_DACL_PROTECTED 0: SEC_DESC_SACL_PROTECTED 0: SEC_DESC_RM_CONTROL_VALID 1: SEC_DESC_SELF_RELATIVE owner_sid : * owner_sid : S-1-5-32-544 group_sid : * group_sid : S-1-5-32-544 sacl : * sacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x004c (76) num_aces : 0x00000003 (3) aces : * aces: ARRAY(3) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x00020011 (131089) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 [2]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-548 dacl : * dacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x004c (76) num_aces : 0x00000003 (3) aces : * aces: ARRAY(3) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x00020011 (131089) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 [2]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-548 samr_SetSecurity: struct samr_SetSecurity out: struct samr_SetSecurity result : NT_STATUS_OK samr_QuerySecurity: struct samr_QuerySecurity in: struct samr_QuerySecurity handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : dab22eb6-9cc9-4b5b-906e-586fd38d6b31 sec_info : 0x00000007 (7) samr_QuerySecurity: struct samr_QuerySecurity out: struct samr_QuerySecurity sdbuf : * sdbuf: struct sec_desc_buf sd_size : 0x00000080 (128) sd : * sd: struct security_descriptor revision : SEC_DESC_REVISION_1 (1) type : 0x8004 (32772) 0: SEC_DESC_OWNER_DEFAULTED 0: SEC_DESC_GROUP_DEFAULTED 1: SEC_DESC_DACL_PRESENT 0: SEC_DESC_DACL_DEFAULTED 0: SEC_DESC_SACL_PRESENT 0: SEC_DESC_SACL_DEFAULTED 0: SEC_DESC_DACL_TRUSTED 0: SEC_DESC_SERVER_SECURITY 0: SEC_DESC_DACL_AUTO_INHERIT_REQ 0: SEC_DESC_SACL_AUTO_INHERIT_REQ 0: SEC_DESC_DACL_AUTO_INHERITED 0: SEC_DESC_SACL_AUTO_INHERITED 0: SEC_DESC_DACL_PROTECTED 0: SEC_DESC_SACL_PROTECTED 0: SEC_DESC_RM_CONTROL_VALID 1: SEC_DESC_SELF_RELATIVE owner_sid : * owner_sid : S-1-5-32-544 group_sid : * group_sid : S-1-5-32-544 sacl : * sacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x004c (76) num_aces : 0x00000003 (3) aces : * aces: ARRAY(3) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x00020011 (131089) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 [2]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-548 dacl : * dacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x004c (76) num_aces : 0x00000003 (3) aces : * aces: ARRAY(3) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x00020011 (131089) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 [2]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-548 result : NT_STATUS_OK Testing QueryGroupInfo level 1 samr_QueryGroupInfo: struct samr_QueryGroupInfo in: struct samr_QueryGroupInfo group_handle : * group_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : dab22eb6-9cc9-4b5b-906e-586fd38d6b31 level : GroupInfoAll (1) samr_QueryGroupInfo: struct samr_QueryGroupInfo out: struct samr_QueryGroupInfo info : * info : union samr_GroupInfo(case 1) all: struct samr_GroupInfoAll name: struct samr_String length : 0x0018 (24) size : 0x0018 (24) string : * string : 'Domain Users' attributes : 0x00000007 (7) num_members : 0x00000002 (2) description: struct samr_String length : 0x0020 (32) size : 0x0020 (32) string : * string : 'All domain users' result : NT_STATUS_OK Testing QueryGroupInfo level 2 samr_QueryGroupInfo: struct samr_QueryGroupInfo in: struct samr_QueryGroupInfo group_handle : * group_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : dab22eb6-9cc9-4b5b-906e-586fd38d6b31 level : GroupInfoName (2) samr_QueryGroupInfo: struct samr_QueryGroupInfo out: struct samr_QueryGroupInfo info : * info : union samr_GroupInfo(case 2) name: struct samr_String length : 0x0018 (24) size : 0x0018 (24) string : * string : 'Domain Users' result : NT_STATUS_OK Testing QueryGroupInfo level 3 samr_QueryGroupInfo: struct samr_QueryGroupInfo in: struct samr_QueryGroupInfo group_handle : * group_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : dab22eb6-9cc9-4b5b-906e-586fd38d6b31 level : GroupInfoX (3) samr_QueryGroupInfo: struct samr_QueryGroupInfo out: struct samr_QueryGroupInfo info : * info : union samr_GroupInfo(case 3) unknown: struct samr_GroupInfoX unknown : 0x00000007 (7) result : NT_STATUS_OK Testing QueryGroupInfo level 4 samr_QueryGroupInfo: struct samr_QueryGroupInfo in: struct samr_QueryGroupInfo group_handle : * group_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : dab22eb6-9cc9-4b5b-906e-586fd38d6b31 level : GroupInfoDescription (4) samr_QueryGroupInfo: struct samr_QueryGroupInfo out: struct samr_QueryGroupInfo info : * info : union samr_GroupInfo(case 4) description: struct samr_String length : 0x0020 (32) size : 0x0020 (32) string : * string : 'All domain users' result : NT_STATUS_OK Testing QueryGroupInfo level 5 samr_QueryGroupInfo: struct samr_QueryGroupInfo in: struct samr_QueryGroupInfo group_handle : * group_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : dab22eb6-9cc9-4b5b-906e-586fd38d6b31 level : GroupInfoAll2 (5) samr_QueryGroupInfo: struct samr_QueryGroupInfo out: struct samr_QueryGroupInfo info : NULL result : NT_STATUS_INVALID_INFO_CLASS QueryGroupInfo level 5 failed - NT_STATUS_INVALID_INFO_CLASS Testing QueryGroupMember samr_QueryGroupMember: struct samr_QueryGroupMember in: struct samr_QueryGroupMember group_handle : * group_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : dab22eb6-9cc9-4b5b-906e-586fd38d6b31 samr_QueryGroupMember: struct samr_QueryGroupMember out: struct samr_QueryGroupMember rids : * rids: struct samr_ridArray count : 0x00000002 (2) rids : * rids: ARRAY(2) [0] : 0x000001f4 (500) [1] : 0x000003ea (1002) unknown : * unknown: ARRAY(2) [0] : 0x00000007 (7) [1] : 0x00000007 (7) result : NT_STATUS_OK samr_Close: struct samr_Close in: struct samr_Close handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : dab22eb6-9cc9-4b5b-906e-586fd38d6b31 samr_Close: struct samr_Close out: struct samr_Close handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : NT_STATUS_OK Testing EnumDomainAliases samr_EnumDomainAliases: struct samr_EnumDomainAliases in: struct samr_EnumDomainAliases domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f resume_handle : * resume_handle : 0x00000000 (0) acct_flags : 0xffffffff (4294967295) 1: ACB_DISABLED 1: ACB_HOMDIRREQ 1: ACB_PWNOTREQ 1: ACB_TEMPDUP 1: ACB_NORMAL 1: ACB_MNS 1: ACB_DOMTRUST 1: ACB_WSTRUST 1: ACB_SVRTRUST 1: ACB_PWNOEXP 1: ACB_AUTOLOCK samr_EnumDomainAliases: struct samr_EnumDomainAliases out: struct samr_EnumDomainAliases resume_handle : * resume_handle : 0x00000000 (0) sam : * sam: struct samr_SamArray count : 0x00000000 (0) entries : * entries: ARRAY(0) num_entries : 0x00000000 (0) result : NT_STATUS_OK Testing QueryDisplayInfo level 1 samr_QueryDisplayInfo: struct samr_QueryDisplayInfo in: struct samr_QueryDisplayInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0001 (1) start_idx : 0x00000000 (0) max_entries : 0x000003e8 (1000) buf_size : 0xffffffff (4294967295) samr_QueryDisplayInfo: struct samr_QueryDisplayInfo out: struct samr_QueryDisplayInfo total_size : 0x00000148 (328) returned_size : 0x00000148 (328) info : union samr_DispInfo(case 1) info1: struct samr_DispInfoGeneral count : 0x00000002 (2) entries : * entries: ARRAY(2) [0]: struct samr_DispEntryGeneral idx : 0x00000001 (1) rid : 0x000001f4 (500) acct_flags : 0x00000210 (528) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 1: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 0: ACB_SVRTRUST 1: ACB_PWNOEXP 0: ACB_AUTOLOCK account_name: struct samr_String length : 0x001a (26) size : 0x001a (26) string : * string : 'Administrator' full_name: struct samr_String length : 0x006c (108) size : 0x006c (108) string : * string : 'Built-in account for administering the computer/domain' description: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : NULL [1]: struct samr_DispEntryGeneral idx : 0x00000002 (2) rid : 0x000001f5 (501) acct_flags : 0x00000211 (529) 1: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 1: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 0: ACB_SVRTRUST 1: ACB_PWNOEXP 0: ACB_AUTOLOCK account_name: struct samr_String length : 0x000a (10) size : 0x000a (10) string : * string : 'Guest' full_name: struct samr_String length : 0x0070 (112) size : 0x0070 (112) string : * string : 'Built-in account for guest access to the computer/domain' description: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : NULL result : NT_STATUS_OK Testing QueryDisplayInfo level 2 samr_QueryDisplayInfo: struct samr_QueryDisplayInfo in: struct samr_QueryDisplayInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0002 (2) start_idx : 0x00000000 (0) max_entries : 0x000003e8 (1000) buf_size : 0xffffffff (4294967295) samr_QueryDisplayInfo: struct samr_QueryDisplayInfo out: struct samr_QueryDisplayInfo total_size : 0x00000030 (48) returned_size : 0x00000030 (48) info : union samr_DispInfo(case 2) info2: struct samr_DispInfoFull count : 0x00000001 (1) entries : * entries: ARRAY(1) [0]: struct samr_DispEntryFull idx : 0x00000001 (1) rid : 0x000003ea (1002) acct_flags : 0x00000100 (256) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 1: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK account_name: struct samr_String length : 0x0014 (20) size : 0x0014 (20) string : * string : 'SPIN4BDC1$' description: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : NULL result : NT_STATUS_OK Testing QueryDisplayInfo level 3 samr_QueryDisplayInfo: struct samr_QueryDisplayInfo in: struct samr_QueryDisplayInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0003 (3) start_idx : 0x00000000 (0) max_entries : 0x000003e8 (1000) buf_size : 0xffffffff (4294967295) samr_QueryDisplayInfo: struct samr_QueryDisplayInfo out: struct samr_QueryDisplayInfo total_size : 0x00000130 (304) returned_size : 0x00000130 (304) info : union samr_DispInfo(case 3) info3: struct samr_DispInfoFull count : 0x00000003 (3) entries : * entries: ARRAY(3) [0]: struct samr_DispEntryFull idx : 0x00000001 (1) rid : 0x00000200 (512) acct_flags : 0x00000007 (7) 1: ACB_DISABLED 1: ACB_HOMDIRREQ 1: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 0: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK account_name: struct samr_String length : 0x001a (26) size : 0x001a (26) string : * string : 'Domain Admins' description: struct samr_String length : 0x004e (78) size : 0x004e (78) string : * string : 'Designated administrators of the domain' [1]: struct samr_DispEntryFull idx : 0x00000002 (2) rid : 0x00000202 (514) acct_flags : 0x00000007 (7) 1: ACB_DISABLED 1: ACB_HOMDIRREQ 1: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 0: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK account_name: struct samr_String length : 0x001a (26) size : 0x001a (26) string : * string : 'Domain Guests' description: struct samr_String length : 0x0022 (34) size : 0x0022 (34) string : * string : 'All domain guests' [2]: struct samr_DispEntryFull idx : 0x00000003 (3) rid : 0x00000201 (513) acct_flags : 0x00000007 (7) 1: ACB_DISABLED 1: ACB_HOMDIRREQ 1: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 0: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK account_name: struct samr_String length : 0x0018 (24) size : 0x0018 (24) string : * string : 'Domain Users' description: struct samr_String length : 0x0020 (32) size : 0x0020 (32) string : * string : 'All domain users' result : NT_STATUS_OK Testing QueryDisplayInfo level 4 samr_QueryDisplayInfo: struct samr_QueryDisplayInfo in: struct samr_QueryDisplayInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0004 (4) start_idx : 0x00000000 (0) max_entries : 0x000003e8 (1000) buf_size : 0xffffffff (4294967295) samr_QueryDisplayInfo: struct samr_QueryDisplayInfo out: struct samr_QueryDisplayInfo total_size : 0x00000000 (0) returned_size : 0x0000002a (42) info : union samr_DispInfo(case 4) info4: struct samr_DispInfoAscii count : 0x00000002 (2) entries : * entries: ARRAY(2) [0]: struct samr_DispEntryAscii idx : 0x00000001 (1) account_name: struct samr_AsciiName length : 0x000d (13) size : 0x000e (14) string : * string : 'Administrator' [1]: struct samr_DispEntryAscii idx : 0x00000002 (2) account_name: struct samr_AsciiName length : 0x0005 (5) size : 0x0006 (6) string : * string : 'Guest' result : NT_STATUS_OK Testing QueryDisplayInfo level 5 samr_QueryDisplayInfo: struct samr_QueryDisplayInfo in: struct samr_QueryDisplayInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0005 (5) start_idx : 0x00000000 (0) max_entries : 0x000003e8 (1000) buf_size : 0xffffffff (4294967295) samr_QueryDisplayInfo: struct samr_QueryDisplayInfo out: struct samr_QueryDisplayInfo total_size : 0x00000000 (0) returned_size : 0x0000004a (74) info : union samr_DispInfo(case 5) info5: struct samr_DispInfoAscii count : 0x00000003 (3) entries : * entries: ARRAY(3) [0]: struct samr_DispEntryAscii idx : 0x00000001 (1) account_name: struct samr_AsciiName length : 0x000d (13) size : 0x000e (14) string : * string : 'Domain Admins' [1]: struct samr_DispEntryAscii idx : 0x00000002 (2) account_name: struct samr_AsciiName length : 0x000d (13) size : 0x000e (14) string : * string : 'Domain Guests' [2]: struct samr_DispEntryAscii idx : 0x00000003 (3) account_name: struct samr_AsciiName length : 0x000c (12) size : 0x000d (13) string : * string : 'Domain Users' result : NT_STATUS_OK Testing QueryDisplayInfo2 level 1 samr_QueryDisplayInfo2: struct samr_QueryDisplayInfo2 in: struct samr_QueryDisplayInfo2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0001 (1) start_idx : 0x00000000 (0) max_entries : 0x000003e8 (1000) buf_size : 0xffffffff (4294967295) samr_QueryDisplayInfo2: struct samr_QueryDisplayInfo2 out: struct samr_QueryDisplayInfo2 total_size : 0x00000148 (328) returned_size : 0x00000148 (328) info : union samr_DispInfo(case 1) info1: struct samr_DispInfoGeneral count : 0x00000002 (2) entries : * entries: ARRAY(2) [0]: struct samr_DispEntryGeneral idx : 0x00000001 (1) rid : 0x000001f4 (500) acct_flags : 0x00000210 (528) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 1: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 0: ACB_SVRTRUST 1: ACB_PWNOEXP 0: ACB_AUTOLOCK account_name: struct samr_String length : 0x001a (26) size : 0x001a (26) string : * string : 'Administrator' full_name: struct samr_String length : 0x006c (108) size : 0x006c (108) string : * string : 'Built-in account for administering the computer/domain' description: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : NULL [1]: struct samr_DispEntryGeneral idx : 0x00000002 (2) rid : 0x000001f5 (501) acct_flags : 0x00000211 (529) 1: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 1: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 0: ACB_SVRTRUST 1: ACB_PWNOEXP 0: ACB_AUTOLOCK account_name: struct samr_String length : 0x000a (10) size : 0x000a (10) string : * string : 'Guest' full_name: struct samr_String length : 0x0070 (112) size : 0x0070 (112) string : * string : 'Built-in account for guest access to the computer/domain' description: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : NULL result : NT_STATUS_OK Testing QueryDisplayInfo2 level 2 samr_QueryDisplayInfo2: struct samr_QueryDisplayInfo2 in: struct samr_QueryDisplayInfo2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0002 (2) start_idx : 0x00000000 (0) max_entries : 0x000003e8 (1000) buf_size : 0xffffffff (4294967295) samr_QueryDisplayInfo2: struct samr_QueryDisplayInfo2 out: struct samr_QueryDisplayInfo2 total_size : 0x00000030 (48) returned_size : 0x00000030 (48) info : union samr_DispInfo(case 2) info2: struct samr_DispInfoFull count : 0x00000001 (1) entries : * entries: ARRAY(1) [0]: struct samr_DispEntryFull idx : 0x00000001 (1) rid : 0x000003ea (1002) acct_flags : 0x00000100 (256) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 1: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK account_name: struct samr_String length : 0x0014 (20) size : 0x0014 (20) string : * string : 'SPIN4BDC1$' description: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : NULL result : NT_STATUS_OK Testing QueryDisplayInfo2 level 3 samr_QueryDisplayInfo2: struct samr_QueryDisplayInfo2 in: struct samr_QueryDisplayInfo2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0003 (3) start_idx : 0x00000000 (0) max_entries : 0x000003e8 (1000) buf_size : 0xffffffff (4294967295) samr_QueryDisplayInfo2: struct samr_QueryDisplayInfo2 out: struct samr_QueryDisplayInfo2 total_size : 0x00000130 (304) returned_size : 0x00000130 (304) info : union samr_DispInfo(case 3) info3: struct samr_DispInfoFull count : 0x00000003 (3) entries : * entries: ARRAY(3) [0]: struct samr_DispEntryFull idx : 0x00000001 (1) rid : 0x00000200 (512) acct_flags : 0x00000007 (7) 1: ACB_DISABLED 1: ACB_HOMDIRREQ 1: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 0: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK account_name: struct samr_String length : 0x001a (26) size : 0x001a (26) string : * string : 'Domain Admins' description: struct samr_String length : 0x004e (78) size : 0x004e (78) string : * string : 'Designated administrators of the domain' [1]: struct samr_DispEntryFull idx : 0x00000002 (2) rid : 0x00000202 (514) acct_flags : 0x00000007 (7) 1: ACB_DISABLED 1: ACB_HOMDIRREQ 1: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 0: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK account_name: struct samr_String length : 0x001a (26) size : 0x001a (26) string : * string : 'Domain Guests' description: struct samr_String length : 0x0022 (34) size : 0x0022 (34) string : * string : 'All domain guests' [2]: struct samr_DispEntryFull idx : 0x00000003 (3) rid : 0x00000201 (513) acct_flags : 0x00000007 (7) 1: ACB_DISABLED 1: ACB_HOMDIRREQ 1: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 0: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK account_name: struct samr_String length : 0x0018 (24) size : 0x0018 (24) string : * string : 'Domain Users' description: struct samr_String length : 0x0020 (32) size : 0x0020 (32) string : * string : 'All domain users' result : NT_STATUS_OK Testing QueryDisplayInfo2 level 4 samr_QueryDisplayInfo2: struct samr_QueryDisplayInfo2 in: struct samr_QueryDisplayInfo2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0004 (4) start_idx : 0x00000000 (0) max_entries : 0x000003e8 (1000) buf_size : 0xffffffff (4294967295) samr_QueryDisplayInfo2: struct samr_QueryDisplayInfo2 out: struct samr_QueryDisplayInfo2 total_size : 0x00000000 (0) returned_size : 0x0000002a (42) info : union samr_DispInfo(case 4) info4: struct samr_DispInfoAscii count : 0x00000002 (2) entries : * entries: ARRAY(2) [0]: struct samr_DispEntryAscii idx : 0x00000001 (1) account_name: struct samr_AsciiName length : 0x000d (13) size : 0x000e (14) string : * string : 'Administrator' [1]: struct samr_DispEntryAscii idx : 0x00000002 (2) account_name: struct samr_AsciiName length : 0x0005 (5) size : 0x0006 (6) string : * string : 'Guest' result : NT_STATUS_OK Testing QueryDisplayInfo2 level 5 samr_QueryDisplayInfo2: struct samr_QueryDisplayInfo2 in: struct samr_QueryDisplayInfo2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0005 (5) start_idx : 0x00000000 (0) max_entries : 0x000003e8 (1000) buf_size : 0xffffffff (4294967295) samr_QueryDisplayInfo2: struct samr_QueryDisplayInfo2 out: struct samr_QueryDisplayInfo2 total_size : 0x00000000 (0) returned_size : 0x0000004a (74) info : union samr_DispInfo(case 5) info5: struct samr_DispInfoAscii count : 0x00000003 (3) entries : * entries: ARRAY(3) [0]: struct samr_DispEntryAscii idx : 0x00000001 (1) account_name: struct samr_AsciiName length : 0x000d (13) size : 0x000e (14) string : * string : 'Domain Admins' [1]: struct samr_DispEntryAscii idx : 0x00000002 (2) account_name: struct samr_AsciiName length : 0x000d (13) size : 0x000e (14) string : * string : 'Domain Guests' [2]: struct samr_DispEntryAscii idx : 0x00000003 (3) account_name: struct samr_AsciiName length : 0x000c (12) size : 0x000d (13) string : * string : 'Domain Users' result : NT_STATUS_OK Testing QueryDisplayInfo3 level 1 samr_QueryDisplayInfo3: struct samr_QueryDisplayInfo3 in: struct samr_QueryDisplayInfo3 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0001 (1) start_idx : 0x00000000 (0) max_entries : 0x000003e8 (1000) buf_size : 0xffffffff (4294967295) samr_QueryDisplayInfo3: struct samr_QueryDisplayInfo3 out: struct samr_QueryDisplayInfo3 total_size : 0x00000148 (328) returned_size : 0x00000148 (328) info : union samr_DispInfo(case 1) info1: struct samr_DispInfoGeneral count : 0x00000002 (2) entries : * entries: ARRAY(2) [0]: struct samr_DispEntryGeneral idx : 0x00000001 (1) rid : 0x000001f4 (500) acct_flags : 0x00000210 (528) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 1: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 0: ACB_SVRTRUST 1: ACB_PWNOEXP 0: ACB_AUTOLOCK account_name: struct samr_String length : 0x001a (26) size : 0x001a (26) string : * string : 'Administrator' full_name: struct samr_String length : 0x006c (108) size : 0x006c (108) string : * string : 'Built-in account for administering the computer/domain' description: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : NULL [1]: struct samr_DispEntryGeneral idx : 0x00000002 (2) rid : 0x000001f5 (501) acct_flags : 0x00000211 (529) 1: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 1: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 0: ACB_SVRTRUST 1: ACB_PWNOEXP 0: ACB_AUTOLOCK account_name: struct samr_String length : 0x000a (10) size : 0x000a (10) string : * string : 'Guest' full_name: struct samr_String length : 0x0070 (112) size : 0x0070 (112) string : * string : 'Built-in account for guest access to the computer/domain' description: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : NULL result : NT_STATUS_OK Testing QueryDisplayInfo3 level 2 samr_QueryDisplayInfo3: struct samr_QueryDisplayInfo3 in: struct samr_QueryDisplayInfo3 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0002 (2) start_idx : 0x00000000 (0) max_entries : 0x000003e8 (1000) buf_size : 0xffffffff (4294967295) samr_QueryDisplayInfo3: struct samr_QueryDisplayInfo3 out: struct samr_QueryDisplayInfo3 total_size : 0x00000030 (48) returned_size : 0x00000030 (48) info : union samr_DispInfo(case 2) info2: struct samr_DispInfoFull count : 0x00000001 (1) entries : * entries: ARRAY(1) [0]: struct samr_DispEntryFull idx : 0x00000001 (1) rid : 0x000003ea (1002) acct_flags : 0x00000100 (256) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 1: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK account_name: struct samr_String length : 0x0014 (20) size : 0x0014 (20) string : * string : 'SPIN4BDC1$' description: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : NULL result : NT_STATUS_OK Testing QueryDisplayInfo3 level 3 samr_QueryDisplayInfo3: struct samr_QueryDisplayInfo3 in: struct samr_QueryDisplayInfo3 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0003 (3) start_idx : 0x00000000 (0) max_entries : 0x000003e8 (1000) buf_size : 0xffffffff (4294967295) samr_QueryDisplayInfo3: struct samr_QueryDisplayInfo3 out: struct samr_QueryDisplayInfo3 total_size : 0x00000130 (304) returned_size : 0x00000130 (304) info : union samr_DispInfo(case 3) info3: struct samr_DispInfoFull count : 0x00000003 (3) entries : * entries: ARRAY(3) [0]: struct samr_DispEntryFull idx : 0x00000001 (1) rid : 0x00000200 (512) acct_flags : 0x00000007 (7) 1: ACB_DISABLED 1: ACB_HOMDIRREQ 1: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 0: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK account_name: struct samr_String length : 0x001a (26) size : 0x001a (26) string : * string : 'Domain Admins' description: struct samr_String length : 0x004e (78) size : 0x004e (78) string : * string : 'Designated administrators of the domain' [1]: struct samr_DispEntryFull idx : 0x00000002 (2) rid : 0x00000202 (514) acct_flags : 0x00000007 (7) 1: ACB_DISABLED 1: ACB_HOMDIRREQ 1: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 0: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK account_name: struct samr_String length : 0x001a (26) size : 0x001a (26) string : * string : 'Domain Guests' description: struct samr_String length : 0x0022 (34) size : 0x0022 (34) string : * string : 'All domain guests' [2]: struct samr_DispEntryFull idx : 0x00000003 (3) rid : 0x00000201 (513) acct_flags : 0x00000007 (7) 1: ACB_DISABLED 1: ACB_HOMDIRREQ 1: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 0: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK account_name: struct samr_String length : 0x0018 (24) size : 0x0018 (24) string : * string : 'Domain Users' description: struct samr_String length : 0x0020 (32) size : 0x0020 (32) string : * string : 'All domain users' result : NT_STATUS_OK Testing QueryDisplayInfo3 level 4 samr_QueryDisplayInfo3: struct samr_QueryDisplayInfo3 in: struct samr_QueryDisplayInfo3 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0004 (4) start_idx : 0x00000000 (0) max_entries : 0x000003e8 (1000) buf_size : 0xffffffff (4294967295) samr_QueryDisplayInfo3: struct samr_QueryDisplayInfo3 out: struct samr_QueryDisplayInfo3 total_size : 0x00000000 (0) returned_size : 0x0000002a (42) info : union samr_DispInfo(case 4) info4: struct samr_DispInfoAscii count : 0x00000002 (2) entries : * entries: ARRAY(2) [0]: struct samr_DispEntryAscii idx : 0x00000001 (1) account_name: struct samr_AsciiName length : 0x000d (13) size : 0x000e (14) string : * string : 'Administrator' [1]: struct samr_DispEntryAscii idx : 0x00000002 (2) account_name: struct samr_AsciiName length : 0x0005 (5) size : 0x0006 (6) string : * string : 'Guest' result : NT_STATUS_OK Testing QueryDisplayInfo3 level 5 samr_QueryDisplayInfo3: struct samr_QueryDisplayInfo3 in: struct samr_QueryDisplayInfo3 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0005 (5) start_idx : 0x00000000 (0) max_entries : 0x000003e8 (1000) buf_size : 0xffffffff (4294967295) samr_QueryDisplayInfo3: struct samr_QueryDisplayInfo3 out: struct samr_QueryDisplayInfo3 total_size : 0x00000000 (0) returned_size : 0x0000004a (74) info : union samr_DispInfo(case 5) info5: struct samr_DispInfoAscii count : 0x00000003 (3) entries : * entries: ARRAY(3) [0]: struct samr_DispEntryAscii idx : 0x00000001 (1) account_name: struct samr_AsciiName length : 0x000d (13) size : 0x000e (14) string : * string : 'Domain Admins' [1]: struct samr_DispEntryAscii idx : 0x00000002 (2) account_name: struct samr_AsciiName length : 0x000d (13) size : 0x000e (14) string : * string : 'Domain Guests' [2]: struct samr_DispEntryAscii idx : 0x00000003 (3) account_name: struct samr_AsciiName length : 0x000c (12) size : 0x000d (13) string : * string : 'Domain Users' result : NT_STATUS_OK Testing GetDisplayEnumerationIndex level 1 samr_GetDisplayEnumerationIndex: struct samr_GetDisplayEnumerationIndex in: struct samr_GetDisplayEnumerationIndex domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0001 (1) name: struct samr_String length : 0x001e (30) size : 0x001e (30) string : * string : 'samrtorturetest' samr_GetDisplayEnumerationIndex: struct samr_GetDisplayEnumerationIndex out: struct samr_GetDisplayEnumerationIndex idx : 0x00000002 (2) result : NT_STATUS_OK samr_GetDisplayEnumerationIndex: struct samr_GetDisplayEnumerationIndex in: struct samr_GetDisplayEnumerationIndex domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0001 (1) name: struct samr_String length : 0x0010 (16) size : 0x0010 (16) string : * string : 'zzzzzzzz' samr_GetDisplayEnumerationIndex: struct samr_GetDisplayEnumerationIndex out: struct samr_GetDisplayEnumerationIndex idx : 0x00000002 (2) result : NT_STATUS_OK GetDisplayEnumerationIndex level 1 failed - NT_STATUS_OK Testing GetDisplayEnumerationIndex level 2 samr_GetDisplayEnumerationIndex: struct samr_GetDisplayEnumerationIndex in: struct samr_GetDisplayEnumerationIndex domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0002 (2) name: struct samr_String length : 0x001e (30) size : 0x001e (30) string : * string : 'samrtorturetest' samr_GetDisplayEnumerationIndex: struct samr_GetDisplayEnumerationIndex out: struct samr_GetDisplayEnumerationIndex idx : 0x00000000 (0) result : NT_STATUS_OK samr_GetDisplayEnumerationIndex: struct samr_GetDisplayEnumerationIndex in: struct samr_GetDisplayEnumerationIndex domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0002 (2) name: struct samr_String length : 0x0010 (16) size : 0x0010 (16) string : * string : 'zzzzzzzz' samr_GetDisplayEnumerationIndex: struct samr_GetDisplayEnumerationIndex out: struct samr_GetDisplayEnumerationIndex idx : 0x00000001 (1) result : NT_STATUS_OK GetDisplayEnumerationIndex level 2 failed - NT_STATUS_OK Testing GetDisplayEnumerationIndex level 3 samr_GetDisplayEnumerationIndex: struct samr_GetDisplayEnumerationIndex in: struct samr_GetDisplayEnumerationIndex domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0003 (3) name: struct samr_String length : 0x001e (30) size : 0x001e (30) string : * string : 'samrtorturetest' samr_GetDisplayEnumerationIndex: struct samr_GetDisplayEnumerationIndex out: struct samr_GetDisplayEnumerationIndex idx : 0x00000003 (3) result : NT_STATUS_OK samr_GetDisplayEnumerationIndex: struct samr_GetDisplayEnumerationIndex in: struct samr_GetDisplayEnumerationIndex domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0003 (3) name: struct samr_String length : 0x0010 (16) size : 0x0010 (16) string : * string : 'zzzzzzzz' samr_GetDisplayEnumerationIndex: struct samr_GetDisplayEnumerationIndex out: struct samr_GetDisplayEnumerationIndex idx : 0x00000003 (3) result : NT_STATUS_OK GetDisplayEnumerationIndex level 3 failed - NT_STATUS_OK Testing GetDisplayEnumerationIndex level 4 samr_GetDisplayEnumerationIndex: struct samr_GetDisplayEnumerationIndex in: struct samr_GetDisplayEnumerationIndex domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0004 (4) name: struct samr_String length : 0x001e (30) size : 0x001e (30) string : * string : 'samrtorturetest' samr_GetDisplayEnumerationIndex: struct samr_GetDisplayEnumerationIndex out: struct samr_GetDisplayEnumerationIndex idx : 0x00159aa0 (1415840) result : NT_STATUS_INVALID_INFO_CLASS samr_GetDisplayEnumerationIndex: struct samr_GetDisplayEnumerationIndex in: struct samr_GetDisplayEnumerationIndex domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0004 (4) name: struct samr_String length : 0x0010 (16) size : 0x0010 (16) string : * string : 'zzzzzzzz' samr_GetDisplayEnumerationIndex: struct samr_GetDisplayEnumerationIndex out: struct samr_GetDisplayEnumerationIndex idx : 0x00159aa0 (1415840) result : NT_STATUS_INVALID_INFO_CLASS Testing GetDisplayEnumerationIndex level 5 samr_GetDisplayEnumerationIndex: struct samr_GetDisplayEnumerationIndex in: struct samr_GetDisplayEnumerationIndex domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0005 (5) name: struct samr_String length : 0x001e (30) size : 0x001e (30) string : * string : 'samrtorturetest' samr_GetDisplayEnumerationIndex: struct samr_GetDisplayEnumerationIndex out: struct samr_GetDisplayEnumerationIndex idx : 0x00159aa0 (1415840) result : NT_STATUS_INVALID_INFO_CLASS samr_GetDisplayEnumerationIndex: struct samr_GetDisplayEnumerationIndex in: struct samr_GetDisplayEnumerationIndex domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0005 (5) name: struct samr_String length : 0x0010 (16) size : 0x0010 (16) string : * string : 'zzzzzzzz' samr_GetDisplayEnumerationIndex: struct samr_GetDisplayEnumerationIndex out: struct samr_GetDisplayEnumerationIndex idx : 0x00159aa0 (1415840) result : NT_STATUS_INVALID_INFO_CLASS Testing GetDisplayEnumerationIndex2 level 1 samr_GetDisplayEnumerationIndex2: struct samr_GetDisplayEnumerationIndex2 in: struct samr_GetDisplayEnumerationIndex2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0001 (1) name: struct samr_String length : 0x001e (30) size : 0x001e (30) string : * string : 'samrtorturetest' samr_GetDisplayEnumerationIndex2: struct samr_GetDisplayEnumerationIndex2 out: struct samr_GetDisplayEnumerationIndex2 idx : 0x00000002 (2) result : NT_STATUS_OK samr_GetDisplayEnumerationIndex2: struct samr_GetDisplayEnumerationIndex2 in: struct samr_GetDisplayEnumerationIndex2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0001 (1) name: struct samr_String length : 0x0010 (16) size : 0x0010 (16) string : * string : 'zzzzzzzz' samr_GetDisplayEnumerationIndex2: struct samr_GetDisplayEnumerationIndex2 out: struct samr_GetDisplayEnumerationIndex2 idx : 0x00000002 (2) result : NT_STATUS_OK GetDisplayEnumerationIndex2 level 1 failed - NT_STATUS_OK Testing GetDisplayEnumerationIndex2 level 2 samr_GetDisplayEnumerationIndex2: struct samr_GetDisplayEnumerationIndex2 in: struct samr_GetDisplayEnumerationIndex2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0002 (2) name: struct samr_String length : 0x001e (30) size : 0x001e (30) string : * string : 'samrtorturetest' samr_GetDisplayEnumerationIndex2: struct samr_GetDisplayEnumerationIndex2 out: struct samr_GetDisplayEnumerationIndex2 idx : 0x00000000 (0) result : NT_STATUS_OK samr_GetDisplayEnumerationIndex2: struct samr_GetDisplayEnumerationIndex2 in: struct samr_GetDisplayEnumerationIndex2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0002 (2) name: struct samr_String length : 0x0010 (16) size : 0x0010 (16) string : * string : 'zzzzzzzz' samr_GetDisplayEnumerationIndex2: struct samr_GetDisplayEnumerationIndex2 out: struct samr_GetDisplayEnumerationIndex2 idx : 0x00000001 (1) result : NT_STATUS_OK GetDisplayEnumerationIndex2 level 2 failed - NT_STATUS_OK Testing GetDisplayEnumerationIndex2 level 3 samr_GetDisplayEnumerationIndex2: struct samr_GetDisplayEnumerationIndex2 in: struct samr_GetDisplayEnumerationIndex2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0003 (3) name: struct samr_String length : 0x001e (30) size : 0x001e (30) string : * string : 'samrtorturetest' samr_GetDisplayEnumerationIndex2: struct samr_GetDisplayEnumerationIndex2 out: struct samr_GetDisplayEnumerationIndex2 idx : 0x00000003 (3) result : NT_STATUS_OK samr_GetDisplayEnumerationIndex2: struct samr_GetDisplayEnumerationIndex2 in: struct samr_GetDisplayEnumerationIndex2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0003 (3) name: struct samr_String length : 0x0010 (16) size : 0x0010 (16) string : * string : 'zzzzzzzz' samr_GetDisplayEnumerationIndex2: struct samr_GetDisplayEnumerationIndex2 out: struct samr_GetDisplayEnumerationIndex2 idx : 0x00000003 (3) result : NT_STATUS_OK GetDisplayEnumerationIndex2 level 3 failed - NT_STATUS_OK Testing GetDisplayEnumerationIndex2 level 4 samr_GetDisplayEnumerationIndex2: struct samr_GetDisplayEnumerationIndex2 in: struct samr_GetDisplayEnumerationIndex2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0004 (4) name: struct samr_String length : 0x001e (30) size : 0x001e (30) string : * string : 'samrtorturetest' samr_GetDisplayEnumerationIndex2: struct samr_GetDisplayEnumerationIndex2 out: struct samr_GetDisplayEnumerationIndex2 idx : 0x00159aa0 (1415840) result : NT_STATUS_INVALID_INFO_CLASS samr_GetDisplayEnumerationIndex2: struct samr_GetDisplayEnumerationIndex2 in: struct samr_GetDisplayEnumerationIndex2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0004 (4) name: struct samr_String length : 0x0010 (16) size : 0x0010 (16) string : * string : 'zzzzzzzz' samr_GetDisplayEnumerationIndex2: struct samr_GetDisplayEnumerationIndex2 out: struct samr_GetDisplayEnumerationIndex2 idx : 0x00159aa0 (1415840) result : NT_STATUS_INVALID_INFO_CLASS Testing GetDisplayEnumerationIndex2 level 5 samr_GetDisplayEnumerationIndex2: struct samr_GetDisplayEnumerationIndex2 in: struct samr_GetDisplayEnumerationIndex2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0005 (5) name: struct samr_String length : 0x001e (30) size : 0x001e (30) string : * string : 'samrtorturetest' samr_GetDisplayEnumerationIndex2: struct samr_GetDisplayEnumerationIndex2 out: struct samr_GetDisplayEnumerationIndex2 idx : 0x00159aa0 (1415840) result : NT_STATUS_INVALID_INFO_CLASS samr_GetDisplayEnumerationIndex2: struct samr_GetDisplayEnumerationIndex2 in: struct samr_GetDisplayEnumerationIndex2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0005 (5) name: struct samr_String length : 0x0010 (16) size : 0x0010 (16) string : * string : 'zzzzzzzz' samr_GetDisplayEnumerationIndex2: struct samr_GetDisplayEnumerationIndex2 out: struct samr_GetDisplayEnumerationIndex2 idx : 0x00159aa0 (1415840) result : NT_STATUS_INVALID_INFO_CLASS Testing coherency of querydispinfo vs enumdomgroups samr_EnumDomainGroups: struct samr_EnumDomainGroups in: struct samr_EnumDomainGroups domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f resume_handle : * resume_handle : 0x00000000 (0) max_size : 0x00000005 (5) samr_EnumDomainGroups: struct samr_EnumDomainGroups out: struct samr_EnumDomainGroups resume_handle : * resume_handle : 0x00000001 (1) sam : * sam: struct samr_SamArray count : 0x00000001 (1) entries : * entries: ARRAY(1) [0]: struct samr_SamEntry idx : 0x00000200 (512) name: struct samr_String length : 0x001a (26) size : 0x0020 (32) string : * string : 'Domain Admins' num_entries : 0x00000001 (1) result : STATUS_MORE_ENTRIES samr_EnumDomainGroups: struct samr_EnumDomainGroups in: struct samr_EnumDomainGroups domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f resume_handle : * resume_handle : 0x00000001 (1) max_size : 0x00000005 (5) samr_EnumDomainGroups: struct samr_EnumDomainGroups out: struct samr_EnumDomainGroups resume_handle : * resume_handle : 0x00000002 (2) sam : * sam: struct samr_SamArray count : 0x00000001 (1) entries : * entries: ARRAY(1) [0]: struct samr_SamEntry idx : 0x00000202 (514) name: struct samr_String length : 0x001a (26) size : 0x0020 (32) string : * string : 'Domain Guests' num_entries : 0x00000001 (1) result : STATUS_MORE_ENTRIES samr_EnumDomainGroups: struct samr_EnumDomainGroups in: struct samr_EnumDomainGroups domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f resume_handle : * resume_handle : 0x00000002 (2) max_size : 0x00000005 (5) samr_EnumDomainGroups: struct samr_EnumDomainGroups out: struct samr_EnumDomainGroups resume_handle : * resume_handle : 0x00000003 (3) sam : * sam: struct samr_SamArray count : 0x00000001 (1) entries : * entries: ARRAY(1) [0]: struct samr_SamEntry idx : 0x00000201 (513) name: struct samr_String length : 0x0018 (24) size : 0x0020 (32) string : * string : 'Domain Users' num_entries : 0x00000001 (1) result : STATUS_MORE_ENTRIES samr_EnumDomainGroups: struct samr_EnumDomainGroups in: struct samr_EnumDomainGroups domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f resume_handle : * resume_handle : 0x00000003 (3) max_size : 0x00000005 (5) samr_EnumDomainGroups: struct samr_EnumDomainGroups out: struct samr_EnumDomainGroups resume_handle : * resume_handle : 0x00000003 (3) sam : * sam: struct samr_SamArray count : 0x00000000 (0) entries : * entries: ARRAY(0) num_entries : 0x00000000 (0) result : NT_STATUS_OK samr_QueryDisplayInfo: struct samr_QueryDisplayInfo in: struct samr_QueryDisplayInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f level : 0x0005 (5) start_idx : 0x00000000 (0) max_entries : 0x00000005 (5) buf_size : 0xffffffff (4294967295) samr_QueryDisplayInfo: struct samr_QueryDisplayInfo out: struct samr_QueryDisplayInfo total_size : 0x00000000 (0) returned_size : 0x0000004a (74) info : union samr_DispInfo(case 5) info5: struct samr_DispInfoAscii count : 0x00000003 (3) entries : * entries: ARRAY(3) [0]: struct samr_DispEntryAscii idx : 0x00000001 (1) account_name: struct samr_AsciiName length : 0x000d (13) size : 0x000e (14) string : * string : 'Domain Admins' [1]: struct samr_DispEntryAscii idx : 0x00000002 (2) account_name: struct samr_AsciiName length : 0x000d (13) size : 0x000e (14) string : * string : 'Domain Guests' [2]: struct samr_DispEntryAscii idx : 0x00000003 (3) account_name: struct samr_AsciiName length : 0x000c (12) size : 0x000d (13) string : * string : 'Domain Users' result : NT_STATUS_OK Testing TestPrivateFunctionsDomain samr_TestPrivateFunctionsDomain: struct samr_TestPrivateFunctionsDomain in: struct samr_TestPrivateFunctionsDomain domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f samr_TestPrivateFunctionsDomain: struct samr_TestPrivateFunctionsDomain out: struct samr_TestPrivateFunctionsDomain result : NT_STATUS_NOT_IMPLEMENTED Testing RidToSid samr_RidToSid: struct samr_RidToSid in: struct samr_RidToSid domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f rid : 0x00000200 (512) RidToSid failed - NT_STATUS_NET_WRITE_FAULT Testing GetBootKeyInformation samr_GetBootKeyInformation: struct samr_GetBootKeyInformation in: struct samr_GetBootKeyInformation domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f samr_GetBootKeyInformation: struct samr_GetBootKeyInformation out: struct samr_GetBootKeyInformation unknown : 0xc0000000 (3221225472) result : NT_STATUS_OK samr_Close: struct samr_Close in: struct samr_Close handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c3c68fa0-9b47-47b9-97b1-7cf274e9402f samr_Close: struct samr_Close out: struct samr_Close handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : NT_STATUS_OK testing samr_Connect samr_Connect: struct samr_Connect in: struct samr_Connect system_name : NULL access_mask : 0x02000000 (33554432) samr_Connect: struct samr_Connect out: struct samr_Connect connect_handle : * connect_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c5039f80-2756-4988-8288-b7281ad947f4 result : NT_STATUS_OK testing samr_Connect2 samr_Connect2: struct samr_Connect2 in: struct samr_Connect2 system_name : NULL access_mask : 0x02000000 (33554432) samr_Connect2: struct samr_Connect2 out: struct samr_Connect2 connect_handle : * connect_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 4bee7f7d-fe28-44fc-b938-8e70b6a4e88f result : NT_STATUS_OK samr_Close: struct samr_Close in: struct samr_Close handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : c5039f80-2756-4988-8288-b7281ad947f4 samr_Close: struct samr_Close out: struct samr_Close handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : NT_STATUS_OK testing samr_Connect3 samr_Connect3: struct samr_Connect3 in: struct samr_Connect3 system_name : NULL unknown : 0x00000000 (0) access_mask : 0x02000000 (33554432) Connect3 failed - NT_STATUS_NET_WRITE_FAULT testing samr_Connect4 samr_Connect4: struct samr_Connect4 in: struct samr_Connect4 system_name : * system_name : '' unknown : 0x00000000 (0) access_mask : 0x02000000 (33554432) Connect4 failed - NT_STATUS_NET_WRITE_FAULT testing samr_Connect5 samr_Connect5: struct samr_Connect5 in: struct samr_Connect5 system_name : * system_name : '' access_mask : 0x02000000 (33554432) level : 0x00000001 (1) info : * info : union samr_ConnectInfo(case 1) info1: struct samr_ConnectInfo1 unknown1 : 0x00000000 (0) unknown2 : 0x00000000 (0) Connect5 failed - NT_STATUS_NET_WRITE_FAULT Testing LookupDomain(Builtin) samr_LookupDomain: struct samr_LookupDomain in: struct samr_LookupDomain connect_handle : * connect_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 4bee7f7d-fe28-44fc-b938-8e70b6a4e88f domain : * domain: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : NULL samr_LookupDomain: struct samr_LookupDomain out: struct samr_LookupDomain sid : NULL result : NT_STATUS_INVALID_PARAMETER samr_LookupDomain: struct samr_LookupDomain in: struct samr_LookupDomain connect_handle : * connect_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 4bee7f7d-fe28-44fc-b938-8e70b6a4e88f domain : * domain: struct samr_String length : 0x0018 (24) size : 0x0018 (24) string : * string : 'xxNODOMAINxx' samr_LookupDomain: struct samr_LookupDomain out: struct samr_LookupDomain sid : NULL result : NT_STATUS_NO_SUCH_DOMAIN samr_LookupDomain: struct samr_LookupDomain in: struct samr_LookupDomain connect_handle : * connect_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 4bee7f7d-fe28-44fc-b938-8e70b6a4e88f domain : * domain: struct samr_String length : 0x000e (14) size : 0x000e (14) string : * string : 'Builtin' samr_LookupDomain: struct samr_LookupDomain out: struct samr_LookupDomain sid : * sid : S-1-5-32 result : NT_STATUS_OK Testing GetDomPwInfo with name Builtin samr_GetDomPwInfo: struct samr_GetDomPwInfo in: struct samr_GetDomPwInfo name : * name: struct samr_String length : 0x000e (14) size : 0x000e (14) string : * string : 'Builtin' samr_GetDomPwInfo: struct samr_GetDomPwInfo out: struct samr_GetDomPwInfo info: struct samr_PwInfo min_password_length : 0x0000 (0) password_properties : 0x00000000 (0) result : NT_STATUS_OK Testing GetDomPwInfo with name \\SPIN4BDC1 samr_GetDomPwInfo: struct samr_GetDomPwInfo in: struct samr_GetDomPwInfo name : * name: struct samr_String length : 0x0016 (22) size : 0x0016 (22) string : * string : '\\SPIN4BDC1' samr_GetDomPwInfo: struct samr_GetDomPwInfo out: struct samr_GetDomPwInfo info: struct samr_PwInfo min_password_length : 0x0000 (0) password_properties : 0x00000000 (0) result : NT_STATUS_OK Testing GetDomPwInfo with name \\__NONAME__ samr_GetDomPwInfo: struct samr_GetDomPwInfo in: struct samr_GetDomPwInfo name : * name: struct samr_String length : 0x0018 (24) size : 0x0018 (24) string : * string : '\\__NONAME__' samr_GetDomPwInfo: struct samr_GetDomPwInfo out: struct samr_GetDomPwInfo info: struct samr_PwInfo min_password_length : 0x0000 (0) password_properties : 0x00000000 (0) result : NT_STATUS_OK Testing GetDomPwInfo with name \\Builtin samr_GetDomPwInfo: struct samr_GetDomPwInfo in: struct samr_GetDomPwInfo name : * name: struct samr_String length : 0x0012 (18) size : 0x0012 (18) string : * string : '\\Builtin' samr_GetDomPwInfo: struct samr_GetDomPwInfo out: struct samr_GetDomPwInfo info: struct samr_PwInfo min_password_length : 0x0000 (0) password_properties : 0x00000000 (0) result : NT_STATUS_OK Testing OpenDomain samr_OpenDomain: struct samr_OpenDomain in: struct samr_OpenDomain connect_handle : * connect_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 4bee7f7d-fe28-44fc-b938-8e70b6a4e88f access_mask : 0x02000000 (33554432) sid : * sid : S-1-5-32 samr_OpenDomain: struct samr_OpenDomain out: struct samr_OpenDomain domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 result : NT_STATUS_OK samr_Close: struct samr_Close in: struct samr_Close handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 4bee7f7d-fe28-44fc-b938-8e70b6a4e88f samr_Close: struct samr_Close out: struct samr_Close handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : NT_STATUS_OK samr_QuerySecurity: struct samr_QuerySecurity in: struct samr_QuerySecurity handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 sec_info : 0x00000007 (7) samr_QuerySecurity: struct samr_QuerySecurity out: struct samr_QuerySecurity sdbuf : * sdbuf: struct sec_desc_buf sd_size : 0x00000068 (104) sd : * sd: struct security_descriptor revision : SEC_DESC_REVISION_1 (1) type : 0x8004 (32772) 0: SEC_DESC_OWNER_DEFAULTED 0: SEC_DESC_GROUP_DEFAULTED 1: SEC_DESC_DACL_PRESENT 0: SEC_DESC_DACL_DEFAULTED 0: SEC_DESC_SACL_PRESENT 0: SEC_DESC_SACL_DEFAULTED 0: SEC_DESC_DACL_TRUSTED 0: SEC_DESC_SERVER_SECURITY 0: SEC_DESC_DACL_AUTO_INHERIT_REQ 0: SEC_DESC_SACL_AUTO_INHERIT_REQ 0: SEC_DESC_DACL_AUTO_INHERITED 0: SEC_DESC_SACL_AUTO_INHERITED 0: SEC_DESC_DACL_PROTECTED 0: SEC_DESC_SACL_PROTECTED 0: SEC_DESC_RM_CONTROL_VALID 1: SEC_DESC_SELF_RELATIVE owner_sid : * owner_sid : S-1-5-32-544 group_sid : * group_sid : S-1-5-32-544 sacl : * sacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0034 (52) num_aces : 0x00000002 (2) aces : * aces: ARRAY(2) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x00020385 (131973) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000207c5 (133061) trustee : S-1-5-32-544 dacl : * dacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0034 (52) num_aces : 0x00000002 (2) aces : * aces: ARRAY(2) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x00020385 (131973) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000207c5 (133061) trustee : S-1-5-32-544 result : NT_STATUS_OK samr_SetSecurity: struct samr_SetSecurity in: struct samr_SetSecurity handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 sec_info : 0x00000007 (7) sdbuf : * sdbuf: struct sec_desc_buf sd_size : 0x0000009c (156) sd : * sd: struct security_descriptor revision : SEC_DESC_REVISION_1 (1) type : 0x8004 (32772) 0: SEC_DESC_OWNER_DEFAULTED 0: SEC_DESC_GROUP_DEFAULTED 1: SEC_DESC_DACL_PRESENT 0: SEC_DESC_DACL_DEFAULTED 0: SEC_DESC_SACL_PRESENT 0: SEC_DESC_SACL_DEFAULTED 0: SEC_DESC_DACL_TRUSTED 0: SEC_DESC_SERVER_SECURITY 0: SEC_DESC_DACL_AUTO_INHERIT_REQ 0: SEC_DESC_SACL_AUTO_INHERIT_REQ 0: SEC_DESC_DACL_AUTO_INHERITED 0: SEC_DESC_SACL_AUTO_INHERITED 0: SEC_DESC_DACL_PROTECTED 0: SEC_DESC_SACL_PROTECTED 0: SEC_DESC_RM_CONTROL_VALID 1: SEC_DESC_SELF_RELATIVE owner_sid : * owner_sid : S-1-5-32-544 group_sid : * group_sid : S-1-5-32-544 sacl : * sacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0034 (52) num_aces : 0x00000002 (2) aces : * aces: ARRAY(2) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x00020385 (131973) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000207c5 (133061) trustee : S-1-5-32-544 dacl : * dacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0034 (52) num_aces : 0x00000002 (2) aces : * aces: ARRAY(2) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x00020385 (131973) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000207c5 (133061) trustee : S-1-5-32-544 samr_SetSecurity: struct samr_SetSecurity out: struct samr_SetSecurity result : NT_STATUS_ACCESS_DENIED SetSecurity failed - NT_STATUS_ACCESS_DENIED samr_RemoveMemberFromForeignDomain: struct samr_RemoveMemberFromForeignDomain in: struct samr_RemoveMemberFromForeignDomain domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 sid : * sid : S-1-5-32-12-34-56-78-9 samr_RemoveMemberFromForeignDomain: struct samr_RemoveMemberFromForeignDomain out: struct samr_RemoveMemberFromForeignDomain result : NT_STATUS_SPECIAL_ACCOUNT RemoveMemberFromForeignDomain failed - NT_STATUS_SPECIAL_ACCOUNT Testing CreateUser2(samrtorturetest, 0x10) samr_CreateUser2: struct samr_CreateUser2 in: struct samr_CreateUser2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 account_name : * account_name: struct samr_String length : 0x001e (30) size : 0x001e (30) string : * string : 'samrtorturetest' acct_flags : 0x00000010 (16) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 1: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 0: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK access_mask : 0x02000000 (33554432) samr_CreateUser2: struct samr_CreateUser2 out: struct samr_CreateUser2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 access_granted : * access_granted : 0x0000001c (28) rid : * rid : 0x00000000 (0) result : NT_STATUS_ACCESS_DENIED Server refused create of 'samrtorturetest' Testing CreateUser2(samrtorturetest, 0x11) samr_CreateUser2: struct samr_CreateUser2 in: struct samr_CreateUser2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 account_name : * account_name: struct samr_String length : 0x001e (30) size : 0x001e (30) string : * string : 'samrtorturetest' acct_flags : 0x00000011 (17) 1: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 1: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 0: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK access_mask : 0x02000000 (33554432) samr_CreateUser2: struct samr_CreateUser2 out: struct samr_CreateUser2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 access_granted : * access_granted : 0x0000001c (28) rid : * rid : 0x00000000 (0) result : NT_STATUS_INVALID_PARAMETER Testing CreateUser2(samrtorturetest, 0x210) samr_CreateUser2: struct samr_CreateUser2 in: struct samr_CreateUser2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 account_name : * account_name: struct samr_String length : 0x001e (30) size : 0x001e (30) string : * string : 'samrtorturetest' acct_flags : 0x00000210 (528) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 1: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 0: ACB_SVRTRUST 1: ACB_PWNOEXP 0: ACB_AUTOLOCK access_mask : 0x02000000 (33554432) samr_CreateUser2: struct samr_CreateUser2 out: struct samr_CreateUser2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 access_granted : * access_granted : 0x00000038 (56) rid : * rid : 0x00000000 (0) result : NT_STATUS_INVALID_PARAMETER Testing CreateUser2(samrtorturetestmach$, 0x80) samr_CreateUser2: struct samr_CreateUser2 in: struct samr_CreateUser2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 account_name : * account_name: struct samr_String length : 0x0028 (40) size : 0x0028 (40) string : * string : 'samrtorturetestmach$' acct_flags : 0x00000080 (128) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 1: ACB_WSTRUST 0: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK access_mask : 0x02000000 (33554432) samr_CreateUser2: struct samr_CreateUser2 out: struct samr_CreateUser2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 access_granted : * access_granted : 0x00000038 (56) rid : * rid : 0x00000000 (0) result : NT_STATUS_ACCESS_DENIED Server refused create of 'samrtorturetestmach$' Testing CreateUser2(samrtorturetestmach$, 0x81) samr_CreateUser2: struct samr_CreateUser2 in: struct samr_CreateUser2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 account_name : * account_name: struct samr_String length : 0x0028 (40) size : 0x0028 (40) string : * string : 'samrtorturetestmach$' acct_flags : 0x00000081 (129) 1: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 1: ACB_WSTRUST 0: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK access_mask : 0x02000000 (33554432) samr_CreateUser2: struct samr_CreateUser2 out: struct samr_CreateUser2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 access_granted : * access_granted : 0x00000038 (56) rid : * rid : 0x00000000 (0) result : NT_STATUS_INVALID_PARAMETER Testing CreateUser2(samrtorturetestmach$, 0x280) samr_CreateUser2: struct samr_CreateUser2 in: struct samr_CreateUser2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 account_name : * account_name: struct samr_String length : 0x0028 (40) size : 0x0028 (40) string : * string : 'samrtorturetestmach$' acct_flags : 0x00000280 (640) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 1: ACB_WSTRUST 0: ACB_SVRTRUST 1: ACB_PWNOEXP 0: ACB_AUTOLOCK access_mask : 0x02000000 (33554432) samr_CreateUser2: struct samr_CreateUser2 out: struct samr_CreateUser2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 access_granted : * access_granted : 0x00000038 (56) rid : * rid : 0x00000000 (0) result : NT_STATUS_INVALID_PARAMETER Testing CreateUser2(samrtorturetestmach$, 0x100) samr_CreateUser2: struct samr_CreateUser2 in: struct samr_CreateUser2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 account_name : * account_name: struct samr_String length : 0x0028 (40) size : 0x0028 (40) string : * string : 'samrtorturetestmach$' acct_flags : 0x00000100 (256) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 1: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK access_mask : 0x02000000 (33554432) samr_CreateUser2: struct samr_CreateUser2 out: struct samr_CreateUser2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 access_granted : * access_granted : 0x00000038 (56) rid : * rid : 0x00000000 (0) result : NT_STATUS_ACCESS_DENIED Server refused create of 'samrtorturetestmach$' Testing CreateUser2(samrtorturetestmach$, 0x101) samr_CreateUser2: struct samr_CreateUser2 in: struct samr_CreateUser2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 account_name : * account_name: struct samr_String length : 0x0028 (40) size : 0x0028 (40) string : * string : 'samrtorturetestmach$' acct_flags : 0x00000101 (257) 1: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 1: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK access_mask : 0x02000000 (33554432) samr_CreateUser2: struct samr_CreateUser2 out: struct samr_CreateUser2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 access_granted : * access_granted : 0x00000038 (56) rid : * rid : 0x00000000 (0) result : NT_STATUS_INVALID_PARAMETER Testing CreateUser2(samrtorturetestmach$, 0x300) samr_CreateUser2: struct samr_CreateUser2 in: struct samr_CreateUser2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 account_name : * account_name: struct samr_String length : 0x0028 (40) size : 0x0028 (40) string : * string : 'samrtorturetestmach$' acct_flags : 0x00000300 (768) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 1: ACB_SVRTRUST 1: ACB_PWNOEXP 0: ACB_AUTOLOCK access_mask : 0x02000000 (33554432) samr_CreateUser2: struct samr_CreateUser2 out: struct samr_CreateUser2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 access_granted : * access_granted : 0x00000038 (56) rid : * rid : 0x00000000 (0) result : NT_STATUS_INVALID_PARAMETER Testing CreateUser2(samrtorturetestdom$, 0x40) samr_CreateUser2: struct samr_CreateUser2 in: struct samr_CreateUser2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 account_name : * account_name: struct samr_String length : 0x0026 (38) size : 0x0026 (38) string : * string : 'samrtorturetestdom$' acct_flags : 0x00000040 (64) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 1: ACB_DOMTRUST 0: ACB_WSTRUST 0: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK access_mask : 0x02000000 (33554432) samr_CreateUser2: struct samr_CreateUser2 out: struct samr_CreateUser2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 access_granted : * access_granted : 0x00000038 (56) rid : * rid : 0x00000000 (0) result : NT_STATUS_ACCESS_DENIED Server refused create of 'samrtorturetestdom$' Testing CreateUser2(samrtorturetestdom$, 0x41) samr_CreateUser2: struct samr_CreateUser2 in: struct samr_CreateUser2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 account_name : * account_name: struct samr_String length : 0x0026 (38) size : 0x0026 (38) string : * string : 'samrtorturetestdom$' acct_flags : 0x00000041 (65) 1: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 1: ACB_DOMTRUST 0: ACB_WSTRUST 0: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK access_mask : 0x02000000 (33554432) samr_CreateUser2: struct samr_CreateUser2 out: struct samr_CreateUser2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 access_granted : * access_granted : 0x00000038 (56) rid : * rid : 0x00000000 (0) result : NT_STATUS_INVALID_PARAMETER Testing CreateUser2(samrtorturetestdom$, 0x240) samr_CreateUser2: struct samr_CreateUser2 in: struct samr_CreateUser2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 account_name : * account_name: struct samr_String length : 0x0026 (38) size : 0x0026 (38) string : * string : 'samrtorturetestdom$' acct_flags : 0x00000240 (576) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 1: ACB_DOMTRUST 0: ACB_WSTRUST 0: ACB_SVRTRUST 1: ACB_PWNOEXP 0: ACB_AUTOLOCK access_mask : 0x02000000 (33554432) samr_CreateUser2: struct samr_CreateUser2 out: struct samr_CreateUser2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 access_granted : * access_granted : 0x00000038 (56) rid : * rid : 0x00000000 (0) result : NT_STATUS_INVALID_PARAMETER Testing CreateUser2(samrtorturetest, 0x0) samr_CreateUser2: struct samr_CreateUser2 in: struct samr_CreateUser2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 account_name : * account_name: struct samr_String length : 0x001e (30) size : 0x001e (30) string : * string : 'samrtorturetest' acct_flags : 0x00000000 (0) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 0: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK access_mask : 0x02000000 (33554432) samr_CreateUser2: struct samr_CreateUser2 out: struct samr_CreateUser2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 access_granted : * access_granted : 0x00000038 (56) rid : * rid : 0x00000000 (0) result : NT_STATUS_INVALID_PARAMETER Testing CreateUser2(samrtorturetest, 0x1) samr_CreateUser2: struct samr_CreateUser2 in: struct samr_CreateUser2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 account_name : * account_name: struct samr_String length : 0x001e (30) size : 0x001e (30) string : * string : 'samrtorturetest' acct_flags : 0x00000001 (1) 1: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 0: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK access_mask : 0x02000000 (33554432) samr_CreateUser2: struct samr_CreateUser2 out: struct samr_CreateUser2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 access_granted : * access_granted : 0x00000038 (56) rid : * rid : 0x00000000 (0) result : NT_STATUS_INVALID_PARAMETER Testing CreateUser(samrtorturetest) samr_CreateUser: struct samr_CreateUser in: struct samr_CreateUser domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 account_name : * account_name: struct samr_String length : 0x001e (30) size : 0x001e (30) string : * string : 'samrtorturetest' access_mask : 0x02000000 (33554432) samr_CreateUser: struct samr_CreateUser out: struct samr_CreateUser user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 rid : * rid : 0x00000000 (0) result : NT_STATUS_ACCESS_DENIED Server refused create of 'samrtorturetest' Testing CreateAlias (samrtorturetestalias) samr_CreateDomAlias: struct samr_CreateDomAlias in: struct samr_CreateDomAlias domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 aliasname : * aliasname: struct samr_String length : 0x0028 (40) size : 0x0028 (40) string : * string : 'samrtorturetestalias' access_mask : 0x02000000 (33554432) samr_CreateDomAlias: struct samr_CreateDomAlias out: struct samr_CreateDomAlias alias_handle : * alias_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 rid : * rid : 0x00000000 (0) result : NT_STATUS_INVALID_DOMAIN_ROLE CreateAlias failed - NT_STATUS_INVALID_DOMAIN_ROLE Testing CreateDomainGroup(samrtorturetestgroup) samr_CreateDomainGroup: struct samr_CreateDomainGroup in: struct samr_CreateDomainGroup domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 name : * name: struct samr_String length : 0x0028 (40) size : 0x0028 (40) string : * string : 'samrtorturetestgroup' access_mask : 0x02000000 (33554432) samr_CreateDomainGroup: struct samr_CreateDomainGroup out: struct samr_CreateDomainGroup group_handle : * group_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 rid : * rid : 0x00000000 (0) result : NT_STATUS_ACCESS_DENIED Server refused create of 'samrtorturetestgroup' Testing QueryDomainInfo level 1 samr_QueryDomainInfo: struct samr_QueryDomainInfo in: struct samr_QueryDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0001 (1) samr_QueryDomainInfo: struct samr_QueryDomainInfo out: struct samr_QueryDomainInfo info : * info : union samr_DomainInfo(case 1) info1: struct samr_DomInfo1 min_password_length : 0x0000 (0) password_history_length : 0x0000 (0) password_properties : 0x00000000 (0) max_password_age : 0xffffde4000000000 (-37108517437440) min_password_age : 0x0000000000000000 (0) result : NT_STATUS_OK Testing SetDomainInfo level 1 samr_SetDomainInfo: struct samr_SetDomainInfo in: struct samr_SetDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0001 (1) info : * info : union samr_DomainInfo(case 1) info1: struct samr_DomInfo1 min_password_length : 0x0000 (0) password_history_length : 0x0000 (0) password_properties : 0x00000000 (0) max_password_age : 0xffffde4000000000 (-37108517437440) min_password_age : 0x0000000000000000 (0) samr_SetDomainInfo: struct samr_SetDomainInfo out: struct samr_SetDomainInfo result : NT_STATUS_ACCESS_DENIED SetDomainInfo level 1 failed - NT_STATUS_ACCESS_DENIED Testing QueryDomainInfo level 2 samr_QueryDomainInfo: struct samr_QueryDomainInfo in: struct samr_QueryDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0002 (2) samr_QueryDomainInfo: struct samr_QueryDomainInfo out: struct samr_QueryDomainInfo info : * info : union samr_DomainInfo(case 2) info2: struct samr_DomInfo2 force_logoff_time : Wed Jan 22 17:55:33 1975 EST comment: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' domain: struct samr_String length : 0x000e (14) size : 0x0010 (16) string : * string : 'Builtin' primary: struct samr_String length : 0x0010 (16) size : 0x0010 (16) string : * string : 'SPIN4PDC' sequence_num : 0x0000000000000003 (3) unknown2 : 0x00000001 (1) role : ROLE_DOMAIN_BDC (2) unknown3 : 0x00000001 (1) num_users : 0x00000000 (0) num_groups : 0x00000000 (0) num_aliases : 0x00000008 (8) result : NT_STATUS_OK Testing SetDomainInfo level 2 samr_SetDomainInfo: struct samr_SetDomainInfo in: struct samr_SetDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0002 (2) info : * info : union samr_DomainInfo(case 2) info2: struct samr_DomInfo2 force_logoff_time : Wed Jan 22 17:55:33 1975 EST comment: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' domain: struct samr_String length : 0x000e (14) size : 0x000e (14) string : * string : 'Builtin' primary: struct samr_String length : 0x0010 (16) size : 0x0010 (16) string : * string : 'SPIN4PDC' sequence_num : 0x0000000000000003 (3) unknown2 : 0x00000001 (1) role : ROLE_DOMAIN_BDC (2) unknown3 : 0x00000001 (1) num_users : 0x00000000 (0) num_groups : 0x00000000 (0) num_aliases : 0x00000008 (8) samr_SetDomainInfo: struct samr_SetDomainInfo out: struct samr_SetDomainInfo result : NT_STATUS_INVALID_INFO_CLASS samr_QueryDomainInfo: struct samr_QueryDomainInfo in: struct samr_QueryDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0002 (2) samr_QueryDomainInfo: struct samr_QueryDomainInfo out: struct samr_QueryDomainInfo info : * info : union samr_DomainInfo(case 2) info2: struct samr_DomInfo2 force_logoff_time : Wed Jan 22 17:55:33 1975 EST comment: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' domain: struct samr_String length : 0x000e (14) size : 0x0010 (16) string : * string : 'Builtin' primary: struct samr_String length : 0x0010 (16) size : 0x0010 (16) string : * string : 'SPIN4PDC' sequence_num : 0x0000000000000003 (3) unknown2 : 0x00000001 (1) role : ROLE_DOMAIN_BDC (2) unknown3 : 0x00000001 (1) num_users : 0x00000000 (0) num_groups : 0x00000000 (0) num_aliases : 0x00000008 (8) result : NT_STATUS_OK Testing QueryDomainInfo level 3 samr_QueryDomainInfo: struct samr_QueryDomainInfo in: struct samr_QueryDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0003 (3) samr_QueryDomainInfo: struct samr_QueryDomainInfo out: struct samr_QueryDomainInfo info : * info : union samr_DomainInfo(case 3) info3: struct samr_DomInfo3 force_logoff_time : Wed Jan 22 17:55:33 1975 EST result : NT_STATUS_OK Testing SetDomainInfo level 3 samr_SetDomainInfo: struct samr_SetDomainInfo in: struct samr_SetDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0003 (3) info : * info : union samr_DomainInfo(case 3) info3: struct samr_DomInfo3 force_logoff_time : Wed Jan 22 17:55:33 1975 EST samr_SetDomainInfo: struct samr_SetDomainInfo out: struct samr_SetDomainInfo result : NT_STATUS_ACCESS_DENIED SetDomainInfo level 3 failed - NT_STATUS_ACCESS_DENIED Testing QueryDomainInfo level 4 samr_QueryDomainInfo: struct samr_QueryDomainInfo in: struct samr_QueryDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0004 (4) samr_QueryDomainInfo: struct samr_QueryDomainInfo out: struct samr_QueryDomainInfo info : * info : union samr_DomainInfo(case 4) info4: struct samr_DomInfo4 comment: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' result : NT_STATUS_OK Testing SetDomainInfo level 4 samr_SetDomainInfo: struct samr_SetDomainInfo in: struct samr_SetDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0004 (4) info : * info : union samr_DomainInfo(case 4) info4: struct samr_DomInfo4 comment: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' samr_SetDomainInfo: struct samr_SetDomainInfo out: struct samr_SetDomainInfo result : NT_STATUS_ACCESS_DENIED SetDomainInfo level 4 failed - NT_STATUS_ACCESS_DENIED Testing QueryDomainInfo level 5 samr_QueryDomainInfo: struct samr_QueryDomainInfo in: struct samr_QueryDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0005 (5) samr_QueryDomainInfo: struct samr_QueryDomainInfo out: struct samr_QueryDomainInfo info : * info : union samr_DomainInfo(case 5) info5: struct samr_DomInfo5 domain_name: struct samr_String length : 0x000e (14) size : 0x0010 (16) string : * string : 'Builtin' result : NT_STATUS_OK Testing SetDomainInfo level 5 samr_SetDomainInfo: struct samr_SetDomainInfo in: struct samr_SetDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0005 (5) info : * info : union samr_DomainInfo(case 5) info5: struct samr_DomInfo5 domain_name: struct samr_String length : 0x000e (14) size : 0x000e (14) string : * string : 'Builtin' samr_SetDomainInfo: struct samr_SetDomainInfo out: struct samr_SetDomainInfo result : NT_STATUS_INVALID_INFO_CLASS samr_QueryDomainInfo: struct samr_QueryDomainInfo in: struct samr_QueryDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0005 (5) samr_QueryDomainInfo: struct samr_QueryDomainInfo out: struct samr_QueryDomainInfo info : * info : union samr_DomainInfo(case 5) info5: struct samr_DomInfo5 domain_name: struct samr_String length : 0x000e (14) size : 0x0010 (16) string : * string : 'Builtin' result : NT_STATUS_OK Testing QueryDomainInfo level 6 samr_QueryDomainInfo: struct samr_QueryDomainInfo in: struct samr_QueryDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0006 (6) samr_QueryDomainInfo: struct samr_QueryDomainInfo out: struct samr_QueryDomainInfo info : * info : union samr_DomainInfo(case 6) info6: struct samr_DomInfo6 primary: struct samr_String length : 0x0010 (16) size : 0x0010 (16) string : * string : 'SPIN4PDC' result : NT_STATUS_OK Testing SetDomainInfo level 6 samr_SetDomainInfo: struct samr_SetDomainInfo in: struct samr_SetDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0006 (6) info : * info : union samr_DomainInfo(case 6) info6: struct samr_DomInfo6 primary: struct samr_String length : 0x0010 (16) size : 0x0010 (16) string : * string : 'SPIN4PDC' samr_SetDomainInfo: struct samr_SetDomainInfo out: struct samr_SetDomainInfo result : NT_STATUS_INVALID_DOMAIN_ROLE SetDomainInfo level 6 failed - NT_STATUS_INVALID_DOMAIN_ROLE Testing QueryDomainInfo level 7 samr_QueryDomainInfo: struct samr_QueryDomainInfo in: struct samr_QueryDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0007 (7) samr_QueryDomainInfo: struct samr_QueryDomainInfo out: struct samr_QueryDomainInfo info : * info : union samr_DomainInfo(case 7) info7: struct samr_DomInfo7 role : UNKNOWN_ENUM_VALUE (1048578) result : NT_STATUS_OK Testing SetDomainInfo level 7 samr_SetDomainInfo: struct samr_SetDomainInfo in: struct samr_SetDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0007 (7) info : * info : union samr_DomainInfo(case 7) info7: struct samr_DomInfo7 role : UNKNOWN_ENUM_VALUE (1048578) samr_SetDomainInfo: struct samr_SetDomainInfo out: struct samr_SetDomainInfo result : NT_STATUS_OK samr_QueryDomainInfo: struct samr_QueryDomainInfo in: struct samr_QueryDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0007 (7) samr_QueryDomainInfo: struct samr_QueryDomainInfo out: struct samr_QueryDomainInfo info : * info : union samr_DomainInfo(case 7) info7: struct samr_DomInfo7 role : UNKNOWN_ENUM_VALUE (1048578) result : NT_STATUS_OK Testing QueryDomainInfo level 8 samr_QueryDomainInfo: struct samr_QueryDomainInfo in: struct samr_QueryDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0008 (8) samr_QueryDomainInfo: struct samr_QueryDomainInfo out: struct samr_QueryDomainInfo info : * info : union samr_DomainInfo(case 8) info8: struct samr_DomInfo8 sequence_num : 0x0000000000000003 domain_create_time : Sat Dec 13 07:13:46 2003 EST result : NT_STATUS_OK Testing SetDomainInfo level 8 samr_SetDomainInfo: struct samr_SetDomainInfo in: struct samr_SetDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0008 (8) info : * info : union samr_DomainInfo(case 8) info8: struct samr_DomInfo8 sequence_num : 0x0000000000000003 domain_create_time : Sat Dec 13 07:13:46 2003 EST samr_SetDomainInfo: struct samr_SetDomainInfo out: struct samr_SetDomainInfo result : NT_STATUS_INVALID_INFO_CLASS samr_QueryDomainInfo: struct samr_QueryDomainInfo in: struct samr_QueryDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0008 (8) samr_QueryDomainInfo: struct samr_QueryDomainInfo out: struct samr_QueryDomainInfo info : * info : union samr_DomainInfo(case 8) info8: struct samr_DomInfo8 sequence_num : 0x0000000000000003 domain_create_time : Sat Dec 13 07:13:46 2003 EST result : NT_STATUS_OK Testing QueryDomainInfo level 9 samr_QueryDomainInfo: struct samr_QueryDomainInfo in: struct samr_QueryDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0009 (9) samr_QueryDomainInfo: struct samr_QueryDomainInfo out: struct samr_QueryDomainInfo info : * info : union samr_DomainInfo(case 9) info9: struct samr_DomInfo9 unknown : 0x00000001 (1) result : NT_STATUS_OK Testing SetDomainInfo level 9 samr_SetDomainInfo: struct samr_SetDomainInfo in: struct samr_SetDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0009 (9) info : * info : union samr_DomainInfo(case 9) info9: struct samr_DomInfo9 unknown : 0x00000001 (1) samr_SetDomainInfo: struct samr_SetDomainInfo out: struct samr_SetDomainInfo result : NT_STATUS_INVALID_DOMAIN_ROLE SetDomainInfo level 9 failed - NT_STATUS_INVALID_DOMAIN_ROLE Testing QueryDomainInfo level 11 samr_QueryDomainInfo: struct samr_QueryDomainInfo in: struct samr_QueryDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x000b (11) samr_QueryDomainInfo: struct samr_QueryDomainInfo out: struct samr_QueryDomainInfo info : * info : union samr_DomainInfo(case 11) info11: struct samr_DomInfo11 info2: struct samr_DomInfo2 force_logoff_time : Wed Jan 22 17:55:33 1975 EST comment: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' domain: struct samr_String length : 0x000e (14) size : 0x0010 (16) string : * string : 'Builtin' primary: struct samr_String length : 0x0010 (16) size : 0x0010 (16) string : * string : 'SPIN4PDC' sequence_num : 0x0000000000000003 (3) unknown2 : 0x00000001 (1) role : ROLE_DOMAIN_BDC (2) unknown3 : 0x00000001 (1) num_users : 0x00000000 (0) num_groups : 0x00000000 (0) num_aliases : 0x00000008 (8) lockout_duration : 0xfffffffbcf1dcc00 lockout_window : 0xfffffffbcf1dcc00 lockout_threshold : 0x0000 (0) result : NT_STATUS_OK Testing SetDomainInfo level 11 samr_SetDomainInfo: struct samr_SetDomainInfo in: struct samr_SetDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x000b (11) info : * info : union samr_DomainInfo(case 11) info11: struct samr_DomInfo11 info2: struct samr_DomInfo2 force_logoff_time : Wed Jan 22 17:55:33 1975 EST comment: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' domain: struct samr_String length : 0x000e (14) size : 0x000e (14) string : * string : 'Builtin' primary: struct samr_String length : 0x0010 (16) size : 0x0010 (16) string : * string : 'SPIN4PDC' sequence_num : 0x0000000000000003 (3) unknown2 : 0x00000001 (1) role : ROLE_DOMAIN_BDC (2) unknown3 : 0x00000001 (1) num_users : 0x00000000 (0) num_groups : 0x00000000 (0) num_aliases : 0x00000008 (8) lockout_duration : 0xfffffffbcf1dcc00 lockout_window : 0xfffffffbcf1dcc00 lockout_threshold : 0x0000 (0) samr_SetDomainInfo: struct samr_SetDomainInfo out: struct samr_SetDomainInfo result : NT_STATUS_INVALID_INFO_CLASS samr_QueryDomainInfo: struct samr_QueryDomainInfo in: struct samr_QueryDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x000b (11) samr_QueryDomainInfo: struct samr_QueryDomainInfo out: struct samr_QueryDomainInfo info : * info : union samr_DomainInfo(case 11) info11: struct samr_DomInfo11 info2: struct samr_DomInfo2 force_logoff_time : Wed Jan 22 17:55:33 1975 EST comment: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' domain: struct samr_String length : 0x000e (14) size : 0x0010 (16) string : * string : 'Builtin' primary: struct samr_String length : 0x0010 (16) size : 0x0010 (16) string : * string : 'SPIN4PDC' sequence_num : 0x0000000000000003 (3) unknown2 : 0x00000001 (1) role : ROLE_DOMAIN_BDC (2) unknown3 : 0x00000001 (1) num_users : 0x00000000 (0) num_groups : 0x00000000 (0) num_aliases : 0x00000008 (8) lockout_duration : 0xfffffffbcf1dcc00 lockout_window : 0xfffffffbcf1dcc00 lockout_threshold : 0x0000 (0) result : NT_STATUS_OK Testing QueryDomainInfo level 12 samr_QueryDomainInfo: struct samr_QueryDomainInfo in: struct samr_QueryDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x000c (12) samr_QueryDomainInfo: struct samr_QueryDomainInfo out: struct samr_QueryDomainInfo info : * info : union samr_DomainInfo(case 12) info12: struct samr_DomInfo12 lockout_duration : 0xfffffffbcf1dcc00 lockout_window : 0xfffffffbcf1dcc00 lockout_threshold : 0x0000 (0) result : NT_STATUS_OK Testing SetDomainInfo level 12 samr_SetDomainInfo: struct samr_SetDomainInfo in: struct samr_SetDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x000c (12) info : * info : union samr_DomainInfo(case 12) info12: struct samr_DomInfo12 lockout_duration : 0xfffffffbcf1dcc00 lockout_window : 0xfffffffbcf1dcc00 lockout_threshold : 0x0000 (0) samr_SetDomainInfo: struct samr_SetDomainInfo out: struct samr_SetDomainInfo result : NT_STATUS_ACCESS_DENIED SetDomainInfo level 12 failed - NT_STATUS_ACCESS_DENIED Testing QueryDomainInfo level 13 samr_QueryDomainInfo: struct samr_QueryDomainInfo in: struct samr_QueryDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x000d (13) samr_QueryDomainInfo: struct samr_QueryDomainInfo out: struct samr_QueryDomainInfo info : * info : union samr_DomainInfo(case 13) info13: struct samr_DomInfo13 sequence_num : 0x0000000000000003 domain_create_time : Sat Dec 13 07:13:46 2003 EST unknown1 : 0x00000000 (0) unknown2 : 0x00000000 (0) result : NT_STATUS_OK Testing SetDomainInfo level 13 samr_SetDomainInfo: struct samr_SetDomainInfo in: struct samr_SetDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x000d (13) info : * info : union samr_DomainInfo(case 13) info13: struct samr_DomInfo13 sequence_num : 0x0000000000000003 domain_create_time : Sat Dec 13 07:13:46 2003 EST unknown1 : 0x00000000 (0) unknown2 : 0x00000000 (0) samr_SetDomainInfo: struct samr_SetDomainInfo out: struct samr_SetDomainInfo result : NT_STATUS_INVALID_INFO_CLASS samr_QueryDomainInfo: struct samr_QueryDomainInfo in: struct samr_QueryDomainInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x000d (13) samr_QueryDomainInfo: struct samr_QueryDomainInfo out: struct samr_QueryDomainInfo info : * info : union samr_DomainInfo(case 13) info13: struct samr_DomInfo13 sequence_num : 0x0000000000000003 domain_create_time : Sat Dec 13 07:13:46 2003 EST unknown1 : 0x00000000 (0) unknown2 : 0x00000000 (0) result : NT_STATUS_OK Testing QueryDomainInfo2 level 1 samr_QueryDomainInfo2: struct samr_QueryDomainInfo2 in: struct samr_QueryDomainInfo2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0001 (1) samr_QueryDomainInfo2: struct samr_QueryDomainInfo2 out: struct samr_QueryDomainInfo2 info : * info : union samr_DomainInfo(case 1) info1: struct samr_DomInfo1 min_password_length : 0x0000 (0) password_history_length : 0x0000 (0) password_properties : 0x00000000 (0) max_password_age : 0xffffde4000000000 (-37108517437440) min_password_age : 0x0000000000000000 (0) result : NT_STATUS_OK Testing QueryDomainInfo2 level 2 samr_QueryDomainInfo2: struct samr_QueryDomainInfo2 in: struct samr_QueryDomainInfo2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0002 (2) samr_QueryDomainInfo2: struct samr_QueryDomainInfo2 out: struct samr_QueryDomainInfo2 info : * info : union samr_DomainInfo(case 2) info2: struct samr_DomInfo2 force_logoff_time : Wed Jan 22 17:55:33 1975 EST comment: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' domain: struct samr_String length : 0x000e (14) size : 0x0010 (16) string : * string : 'Builtin' primary: struct samr_String length : 0x0010 (16) size : 0x0010 (16) string : * string : 'SPIN4PDC' sequence_num : 0x0000000000000003 (3) unknown2 : 0x00000001 (1) role : ROLE_DOMAIN_BDC (2) unknown3 : 0x00000001 (1) num_users : 0x00000000 (0) num_groups : 0x00000000 (0) num_aliases : 0x00000008 (8) result : NT_STATUS_OK Testing QueryDomainInfo2 level 3 samr_QueryDomainInfo2: struct samr_QueryDomainInfo2 in: struct samr_QueryDomainInfo2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0003 (3) samr_QueryDomainInfo2: struct samr_QueryDomainInfo2 out: struct samr_QueryDomainInfo2 info : * info : union samr_DomainInfo(case 3) info3: struct samr_DomInfo3 force_logoff_time : Wed Jan 22 17:55:33 1975 EST result : NT_STATUS_OK Testing QueryDomainInfo2 level 4 samr_QueryDomainInfo2: struct samr_QueryDomainInfo2 in: struct samr_QueryDomainInfo2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0004 (4) samr_QueryDomainInfo2: struct samr_QueryDomainInfo2 out: struct samr_QueryDomainInfo2 info : * info : union samr_DomainInfo(case 4) info4: struct samr_DomInfo4 comment: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' result : NT_STATUS_OK Testing QueryDomainInfo2 level 5 samr_QueryDomainInfo2: struct samr_QueryDomainInfo2 in: struct samr_QueryDomainInfo2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0005 (5) samr_QueryDomainInfo2: struct samr_QueryDomainInfo2 out: struct samr_QueryDomainInfo2 info : * info : union samr_DomainInfo(case 5) info5: struct samr_DomInfo5 domain_name: struct samr_String length : 0x000e (14) size : 0x0010 (16) string : * string : 'Builtin' result : NT_STATUS_OK Testing QueryDomainInfo2 level 6 samr_QueryDomainInfo2: struct samr_QueryDomainInfo2 in: struct samr_QueryDomainInfo2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0006 (6) samr_QueryDomainInfo2: struct samr_QueryDomainInfo2 out: struct samr_QueryDomainInfo2 info : * info : union samr_DomainInfo(case 6) info6: struct samr_DomInfo6 primary: struct samr_String length : 0x0010 (16) size : 0x0010 (16) string : * string : 'SPIN4PDC' result : NT_STATUS_OK Testing QueryDomainInfo2 level 7 samr_QueryDomainInfo2: struct samr_QueryDomainInfo2 in: struct samr_QueryDomainInfo2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0007 (7) samr_QueryDomainInfo2: struct samr_QueryDomainInfo2 out: struct samr_QueryDomainInfo2 info : * info : union samr_DomainInfo(case 7) info7: struct samr_DomInfo7 role : UNKNOWN_ENUM_VALUE (1048578) result : NT_STATUS_OK Testing QueryDomainInfo2 level 8 samr_QueryDomainInfo2: struct samr_QueryDomainInfo2 in: struct samr_QueryDomainInfo2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0008 (8) samr_QueryDomainInfo2: struct samr_QueryDomainInfo2 out: struct samr_QueryDomainInfo2 info : * info : union samr_DomainInfo(case 8) info8: struct samr_DomInfo8 sequence_num : 0x0000000000000003 domain_create_time : Sat Dec 13 07:13:46 2003 EST result : NT_STATUS_OK Testing QueryDomainInfo2 level 9 samr_QueryDomainInfo2: struct samr_QueryDomainInfo2 in: struct samr_QueryDomainInfo2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0009 (9) samr_QueryDomainInfo2: struct samr_QueryDomainInfo2 out: struct samr_QueryDomainInfo2 info : * info : union samr_DomainInfo(case 9) info9: struct samr_DomInfo9 unknown : 0x00000001 (1) result : NT_STATUS_OK Testing QueryDomainInfo2 level 11 samr_QueryDomainInfo2: struct samr_QueryDomainInfo2 in: struct samr_QueryDomainInfo2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x000b (11) samr_QueryDomainInfo2: struct samr_QueryDomainInfo2 out: struct samr_QueryDomainInfo2 info : * info : union samr_DomainInfo(case 11) info11: struct samr_DomInfo11 info2: struct samr_DomInfo2 force_logoff_time : Wed Jan 22 17:55:33 1975 EST comment: struct samr_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' domain: struct samr_String length : 0x000e (14) size : 0x0010 (16) string : * string : 'Builtin' primary: struct samr_String length : 0x0010 (16) size : 0x0010 (16) string : * string : 'SPIN4PDC' sequence_num : 0x0000000000000003 (3) unknown2 : 0x00000001 (1) role : ROLE_DOMAIN_BDC (2) unknown3 : 0x00000001 (1) num_users : 0x00000000 (0) num_groups : 0x00000000 (0) num_aliases : 0x00000008 (8) lockout_duration : 0xfffffffbcf1dcc00 lockout_window : 0xfffffffbcf1dcc00 lockout_threshold : 0x0000 (0) result : NT_STATUS_OK Testing QueryDomainInfo2 level 12 samr_QueryDomainInfo2: struct samr_QueryDomainInfo2 in: struct samr_QueryDomainInfo2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x000c (12) samr_QueryDomainInfo2: struct samr_QueryDomainInfo2 out: struct samr_QueryDomainInfo2 info : * info : union samr_DomainInfo(case 12) info12: struct samr_DomInfo12 lockout_duration : 0xfffffffbcf1dcc00 lockout_window : 0xfffffffbcf1dcc00 lockout_threshold : 0x0000 (0) result : NT_STATUS_OK Testing QueryDomainInfo2 level 13 samr_QueryDomainInfo2: struct samr_QueryDomainInfo2 in: struct samr_QueryDomainInfo2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x000d (13) samr_QueryDomainInfo2: struct samr_QueryDomainInfo2 out: struct samr_QueryDomainInfo2 info : * info : union samr_DomainInfo(case 13) info13: struct samr_DomInfo13 sequence_num : 0x0000000000000003 domain_create_time : Sat Dec 13 07:13:46 2003 EST unknown1 : 0x00000000 (0) unknown2 : 0x00000000 (0) result : NT_STATUS_OK Testing EnumDomainUsers samr_EnumDomainUsers: struct samr_EnumDomainUsers in: struct samr_EnumDomainUsers domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 resume_handle : * resume_handle : 0x00000000 (0) acct_flags : 0x00000000 (0) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 0: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK max_size : 0xffffffff (4294967295) samr_EnumDomainUsers: struct samr_EnumDomainUsers out: struct samr_EnumDomainUsers resume_handle : * resume_handle : 0x00000000 (0) sam : * sam: struct samr_SamArray count : 0x00000000 (0) entries : * entries: ARRAY(0) num_entries : 0x00000000 (0) result : NT_STATUS_OK samr async test disabled - enable dangerous tests to use Testing EnumDomainGroups samr_EnumDomainGroups: struct samr_EnumDomainGroups in: struct samr_EnumDomainGroups domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 resume_handle : * resume_handle : 0x00000000 (0) max_size : 0xffffffff (4294967295) samr_EnumDomainGroups: struct samr_EnumDomainGroups out: struct samr_EnumDomainGroups resume_handle : * resume_handle : 0x00000000 (0) sam : * sam: struct samr_SamArray count : 0x00000000 (0) entries : * entries: ARRAY(0) num_entries : 0x00000000 (0) result : NT_STATUS_OK Testing EnumDomainAliases samr_EnumDomainAliases: struct samr_EnumDomainAliases in: struct samr_EnumDomainAliases domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 resume_handle : * resume_handle : 0x00000000 (0) acct_flags : 0xffffffff (4294967295) 1: ACB_DISABLED 1: ACB_HOMDIRREQ 1: ACB_PWNOTREQ 1: ACB_TEMPDUP 1: ACB_NORMAL 1: ACB_MNS 1: ACB_DOMTRUST 1: ACB_WSTRUST 1: ACB_SVRTRUST 1: ACB_PWNOEXP 1: ACB_AUTOLOCK samr_EnumDomainAliases: struct samr_EnumDomainAliases out: struct samr_EnumDomainAliases resume_handle : * resume_handle : 0x00000008 (8) sam : * sam: struct samr_SamArray count : 0x00000008 (8) entries : * entries: ARRAY(8) [0]: struct samr_SamEntry idx : 0x00000224 (548) name: struct samr_String length : 0x0022 (34) size : 0x0022 (34) string : * string : 'Account Operators' [1]: struct samr_SamEntry idx : 0x00000220 (544) name: struct samr_String length : 0x001c (28) size : 0x0020 (32) string : * string : 'Administrators' [2]: struct samr_SamEntry idx : 0x00000227 (551) name: struct samr_String length : 0x0020 (32) size : 0x0020 (32) string : * string : 'Backup Operators' [3]: struct samr_SamEntry idx : 0x00000222 (546) name: struct samr_String length : 0x000c (12) size : 0x0020 (32) string : * string : 'Guests' [4]: struct samr_SamEntry idx : 0x00000226 (550) name: struct samr_String length : 0x001e (30) size : 0x0020 (32) string : * string : 'Print Operators' [5]: struct samr_SamEntry idx : 0x00000228 (552) name: struct samr_String length : 0x0014 (20) size : 0x0020 (32) string : * string : 'Replicator' [6]: struct samr_SamEntry idx : 0x00000225 (549) name: struct samr_String length : 0x0020 (32) size : 0x0020 (32) string : * string : 'Server Operators' [7]: struct samr_SamEntry idx : 0x00000221 (545) name: struct samr_String length : 0x000a (10) size : 0x0020 (32) string : * string : 'Users' num_entries : 0x00000008 (8) result : NT_STATUS_OK Testing OpenAlias(548) samr_OpenAlias: struct samr_OpenAlias in: struct samr_OpenAlias domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 access_mask : 0x02000000 (33554432) rid : 0x00000224 (548) samr_OpenAlias: struct samr_OpenAlias out: struct samr_OpenAlias alias_handle : * alias_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0a884502-bff8-4223-b9dc-fcca694581bb result : NT_STATUS_OK samr_QuerySecurity: struct samr_QuerySecurity in: struct samr_QuerySecurity handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0a884502-bff8-4223-b9dc-fcca694581bb sec_info : 0x00000007 (7) samr_QuerySecurity: struct samr_QuerySecurity out: struct samr_QuerySecurity sdbuf : * sdbuf: struct sec_desc_buf sd_size : 0x00000068 (104) sd : * sd: struct security_descriptor revision : SEC_DESC_REVISION_1 (1) type : 0x8004 (32772) 0: SEC_DESC_OWNER_DEFAULTED 0: SEC_DESC_GROUP_DEFAULTED 1: SEC_DESC_DACL_PRESENT 0: SEC_DESC_DACL_DEFAULTED 0: SEC_DESC_SACL_PRESENT 0: SEC_DESC_SACL_DEFAULTED 0: SEC_DESC_DACL_TRUSTED 0: SEC_DESC_SERVER_SECURITY 0: SEC_DESC_DACL_AUTO_INHERIT_REQ 0: SEC_DESC_SACL_AUTO_INHERIT_REQ 0: SEC_DESC_DACL_AUTO_INHERITED 0: SEC_DESC_SACL_AUTO_INHERITED 0: SEC_DESC_DACL_PROTECTED 0: SEC_DESC_SACL_PROTECTED 0: SEC_DESC_RM_CONTROL_VALID 1: SEC_DESC_SELF_RELATIVE owner_sid : * owner_sid : S-1-5-32-544 group_sid : * group_sid : S-1-5-32-544 sacl : * sacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0034 (52) num_aces : 0x00000002 (2) aces : * aces: ARRAY(2) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002000c (131084) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 dacl : * dacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0034 (52) num_aces : 0x00000002 (2) aces : * aces: ARRAY(2) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002000c (131084) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 result : NT_STATUS_OK samr_SetSecurity: struct samr_SetSecurity in: struct samr_SetSecurity handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0a884502-bff8-4223-b9dc-fcca694581bb sec_info : 0x00000007 (7) sdbuf : * sdbuf: struct sec_desc_buf sd_size : 0x0000009c (156) sd : * sd: struct security_descriptor revision : SEC_DESC_REVISION_1 (1) type : 0x8004 (32772) 0: SEC_DESC_OWNER_DEFAULTED 0: SEC_DESC_GROUP_DEFAULTED 1: SEC_DESC_DACL_PRESENT 0: SEC_DESC_DACL_DEFAULTED 0: SEC_DESC_SACL_PRESENT 0: SEC_DESC_SACL_DEFAULTED 0: SEC_DESC_DACL_TRUSTED 0: SEC_DESC_SERVER_SECURITY 0: SEC_DESC_DACL_AUTO_INHERIT_REQ 0: SEC_DESC_SACL_AUTO_INHERIT_REQ 0: SEC_DESC_DACL_AUTO_INHERITED 0: SEC_DESC_SACL_AUTO_INHERITED 0: SEC_DESC_DACL_PROTECTED 0: SEC_DESC_SACL_PROTECTED 0: SEC_DESC_RM_CONTROL_VALID 1: SEC_DESC_SELF_RELATIVE owner_sid : * owner_sid : S-1-5-32-544 group_sid : * group_sid : S-1-5-32-544 sacl : * sacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0034 (52) num_aces : 0x00000002 (2) aces : * aces: ARRAY(2) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002000c (131084) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 dacl : * dacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0034 (52) num_aces : 0x00000002 (2) aces : * aces: ARRAY(2) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002000c (131084) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 samr_SetSecurity: struct samr_SetSecurity out: struct samr_SetSecurity result : NT_STATUS_OK samr_QuerySecurity: struct samr_QuerySecurity in: struct samr_QuerySecurity handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0a884502-bff8-4223-b9dc-fcca694581bb sec_info : 0x00000007 (7) samr_QuerySecurity: struct samr_QuerySecurity out: struct samr_QuerySecurity sdbuf : * sdbuf: struct sec_desc_buf sd_size : 0x00000068 (104) sd : * sd: struct security_descriptor revision : SEC_DESC_REVISION_1 (1) type : 0x8004 (32772) 0: SEC_DESC_OWNER_DEFAULTED 0: SEC_DESC_GROUP_DEFAULTED 1: SEC_DESC_DACL_PRESENT 0: SEC_DESC_DACL_DEFAULTED 0: SEC_DESC_SACL_PRESENT 0: SEC_DESC_SACL_DEFAULTED 0: SEC_DESC_DACL_TRUSTED 0: SEC_DESC_SERVER_SECURITY 0: SEC_DESC_DACL_AUTO_INHERIT_REQ 0: SEC_DESC_SACL_AUTO_INHERIT_REQ 0: SEC_DESC_DACL_AUTO_INHERITED 0: SEC_DESC_SACL_AUTO_INHERITED 0: SEC_DESC_DACL_PROTECTED 0: SEC_DESC_SACL_PROTECTED 0: SEC_DESC_RM_CONTROL_VALID 1: SEC_DESC_SELF_RELATIVE owner_sid : * owner_sid : S-1-5-32-544 group_sid : * group_sid : S-1-5-32-544 sacl : * sacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0034 (52) num_aces : 0x00000002 (2) aces : * aces: ARRAY(2) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002000c (131084) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 dacl : * dacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0034 (52) num_aces : 0x00000002 (2) aces : * aces: ARRAY(2) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002000c (131084) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 result : NT_STATUS_OK Testing QueryAliasInfo level 1 samr_QueryAliasInfo: struct samr_QueryAliasInfo in: struct samr_QueryAliasInfo alias_handle : * alias_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0a884502-bff8-4223-b9dc-fcca694581bb level : AliasInfoAll (1) samr_QueryAliasInfo: struct samr_QueryAliasInfo out: struct samr_QueryAliasInfo info : * info : union samr_AliasInfo(case 1) all: struct samr_AliasInfoAll name: struct samr_String length : 0x0022 (34) size : 0x0022 (34) string : * string : 'Account Operators' num_members : 0x00000000 (0) description: struct samr_String length : 0x006a (106) size : 0x006a (106) string : * string : 'Members can administer domain user and group accounts' result : NT_STATUS_OK Testing QueryAliasInfo level 2 samr_QueryAliasInfo: struct samr_QueryAliasInfo in: struct samr_QueryAliasInfo alias_handle : * alias_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0a884502-bff8-4223-b9dc-fcca694581bb level : AliasInfoName (2) samr_QueryAliasInfo: struct samr_QueryAliasInfo out: struct samr_QueryAliasInfo info : * info : union samr_AliasInfo(case 2) name: struct samr_String length : 0x0022 (34) size : 0x0022 (34) string : * string : 'Account Operators' result : NT_STATUS_OK Testing QueryAliasInfo level 3 samr_QueryAliasInfo: struct samr_QueryAliasInfo in: struct samr_QueryAliasInfo alias_handle : * alias_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0a884502-bff8-4223-b9dc-fcca694581bb level : AliasInfoDescription (3) samr_QueryAliasInfo: struct samr_QueryAliasInfo out: struct samr_QueryAliasInfo info : * info : union samr_AliasInfo(case 3) description: struct samr_String length : 0x006a (106) size : 0x006a (106) string : * string : 'Members can administer domain user and group accounts' result : NT_STATUS_OK Testing GetMembersInAlias samr_GetMembersInAlias: struct samr_GetMembersInAlias in: struct samr_GetMembersInAlias alias_handle : * alias_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0a884502-bff8-4223-b9dc-fcca694581bb samr_GetMembersInAlias: struct samr_GetMembersInAlias out: struct samr_GetMembersInAlias sids : * sids: struct lsa_SidArray num_sids : 0x00000000 (0) sids : NULL result : NT_STATUS_OK samr_Close: struct samr_Close in: struct samr_Close handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0a884502-bff8-4223-b9dc-fcca694581bb samr_Close: struct samr_Close out: struct samr_Close handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : NT_STATUS_OK Testing OpenAlias(544) samr_OpenAlias: struct samr_OpenAlias in: struct samr_OpenAlias domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 access_mask : 0x02000000 (33554432) rid : 0x00000220 (544) samr_OpenAlias: struct samr_OpenAlias out: struct samr_OpenAlias alias_handle : * alias_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 24e17f20-5e2a-41e4-9354-9fbf6432f866 result : NT_STATUS_OK samr_QuerySecurity: struct samr_QuerySecurity in: struct samr_QuerySecurity handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 24e17f20-5e2a-41e4-9354-9fbf6432f866 sec_info : 0x00000007 (7) samr_QuerySecurity: struct samr_QuerySecurity out: struct samr_QuerySecurity sdbuf : * sdbuf: struct sec_desc_buf sd_size : 0x00000068 (104) sd : * sd: struct security_descriptor revision : SEC_DESC_REVISION_1 (1) type : 0x8004 (32772) 0: SEC_DESC_OWNER_DEFAULTED 0: SEC_DESC_GROUP_DEFAULTED 1: SEC_DESC_DACL_PRESENT 0: SEC_DESC_DACL_DEFAULTED 0: SEC_DESC_SACL_PRESENT 0: SEC_DESC_SACL_DEFAULTED 0: SEC_DESC_DACL_TRUSTED 0: SEC_DESC_SERVER_SECURITY 0: SEC_DESC_DACL_AUTO_INHERIT_REQ 0: SEC_DESC_SACL_AUTO_INHERIT_REQ 0: SEC_DESC_DACL_AUTO_INHERITED 0: SEC_DESC_SACL_AUTO_INHERITED 0: SEC_DESC_DACL_PROTECTED 0: SEC_DESC_SACL_PROTECTED 0: SEC_DESC_RM_CONTROL_VALID 1: SEC_DESC_SELF_RELATIVE owner_sid : * owner_sid : S-1-5-32-544 group_sid : * group_sid : S-1-5-32-544 sacl : * sacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0034 (52) num_aces : 0x00000002 (2) aces : * aces: ARRAY(2) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002000c (131084) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 dacl : * dacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0034 (52) num_aces : 0x00000002 (2) aces : * aces: ARRAY(2) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002000c (131084) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 result : NT_STATUS_OK samr_SetSecurity: struct samr_SetSecurity in: struct samr_SetSecurity handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 24e17f20-5e2a-41e4-9354-9fbf6432f866 sec_info : 0x00000007 (7) sdbuf : * sdbuf: struct sec_desc_buf sd_size : 0x0000009c (156) sd : * sd: struct security_descriptor revision : SEC_DESC_REVISION_1 (1) type : 0x8004 (32772) 0: SEC_DESC_OWNER_DEFAULTED 0: SEC_DESC_GROUP_DEFAULTED 1: SEC_DESC_DACL_PRESENT 0: SEC_DESC_DACL_DEFAULTED 0: SEC_DESC_SACL_PRESENT 0: SEC_DESC_SACL_DEFAULTED 0: SEC_DESC_DACL_TRUSTED 0: SEC_DESC_SERVER_SECURITY 0: SEC_DESC_DACL_AUTO_INHERIT_REQ 0: SEC_DESC_SACL_AUTO_INHERIT_REQ 0: SEC_DESC_DACL_AUTO_INHERITED 0: SEC_DESC_SACL_AUTO_INHERITED 0: SEC_DESC_DACL_PROTECTED 0: SEC_DESC_SACL_PROTECTED 0: SEC_DESC_RM_CONTROL_VALID 1: SEC_DESC_SELF_RELATIVE owner_sid : * owner_sid : S-1-5-32-544 group_sid : * group_sid : S-1-5-32-544 sacl : * sacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0034 (52) num_aces : 0x00000002 (2) aces : * aces: ARRAY(2) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002000c (131084) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 dacl : * dacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0034 (52) num_aces : 0x00000002 (2) aces : * aces: ARRAY(2) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002000c (131084) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 samr_SetSecurity: struct samr_SetSecurity out: struct samr_SetSecurity result : NT_STATUS_OK samr_QuerySecurity: struct samr_QuerySecurity in: struct samr_QuerySecurity handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 24e17f20-5e2a-41e4-9354-9fbf6432f866 sec_info : 0x00000007 (7) samr_QuerySecurity: struct samr_QuerySecurity out: struct samr_QuerySecurity sdbuf : * sdbuf: struct sec_desc_buf sd_size : 0x00000068 (104) sd : * sd: struct security_descriptor revision : SEC_DESC_REVISION_1 (1) type : 0x8004 (32772) 0: SEC_DESC_OWNER_DEFAULTED 0: SEC_DESC_GROUP_DEFAULTED 1: SEC_DESC_DACL_PRESENT 0: SEC_DESC_DACL_DEFAULTED 0: SEC_DESC_SACL_PRESENT 0: SEC_DESC_SACL_DEFAULTED 0: SEC_DESC_DACL_TRUSTED 0: SEC_DESC_SERVER_SECURITY 0: SEC_DESC_DACL_AUTO_INHERIT_REQ 0: SEC_DESC_SACL_AUTO_INHERIT_REQ 0: SEC_DESC_DACL_AUTO_INHERITED 0: SEC_DESC_SACL_AUTO_INHERITED 0: SEC_DESC_DACL_PROTECTED 0: SEC_DESC_SACL_PROTECTED 0: SEC_DESC_RM_CONTROL_VALID 1: SEC_DESC_SELF_RELATIVE owner_sid : * owner_sid : S-1-5-32-544 group_sid : * group_sid : S-1-5-32-544 sacl : * sacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0034 (52) num_aces : 0x00000002 (2) aces : * aces: ARRAY(2) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002000c (131084) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 dacl : * dacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0034 (52) num_aces : 0x00000002 (2) aces : * aces: ARRAY(2) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002000c (131084) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 result : NT_STATUS_OK Testing QueryAliasInfo level 1 samr_QueryAliasInfo: struct samr_QueryAliasInfo in: struct samr_QueryAliasInfo alias_handle : * alias_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 24e17f20-5e2a-41e4-9354-9fbf6432f866 level : AliasInfoAll (1) samr_QueryAliasInfo: struct samr_QueryAliasInfo out: struct samr_QueryAliasInfo info : * info : union samr_AliasInfo(case 1) all: struct samr_AliasInfoAll name: struct samr_String length : 0x001c (28) size : 0x001c (28) string : * string : 'Administrators' num_members : 0x00000002 (2) description: struct samr_String length : 0x0060 (96) size : 0x0060 (96) string : * string : 'Members can fully administer the computer/domain' result : NT_STATUS_OK Testing QueryAliasInfo level 2 samr_QueryAliasInfo: struct samr_QueryAliasInfo in: struct samr_QueryAliasInfo alias_handle : * alias_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 24e17f20-5e2a-41e4-9354-9fbf6432f866 level : AliasInfoName (2) samr_QueryAliasInfo: struct samr_QueryAliasInfo out: struct samr_QueryAliasInfo info : * info : union samr_AliasInfo(case 2) name: struct samr_String length : 0x001c (28) size : 0x001c (28) string : * string : 'Administrators' result : NT_STATUS_OK Testing QueryAliasInfo level 3 samr_QueryAliasInfo: struct samr_QueryAliasInfo in: struct samr_QueryAliasInfo alias_handle : * alias_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 24e17f20-5e2a-41e4-9354-9fbf6432f866 level : AliasInfoDescription (3) samr_QueryAliasInfo: struct samr_QueryAliasInfo out: struct samr_QueryAliasInfo info : * info : union samr_AliasInfo(case 3) description: struct samr_String length : 0x0060 (96) size : 0x0060 (96) string : * string : 'Members can fully administer the computer/domain' result : NT_STATUS_OK Testing GetMembersInAlias samr_GetMembersInAlias: struct samr_GetMembersInAlias in: struct samr_GetMembersInAlias alias_handle : * alias_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 24e17f20-5e2a-41e4-9354-9fbf6432f866 samr_GetMembersInAlias: struct samr_GetMembersInAlias out: struct samr_GetMembersInAlias sids : * sids: struct lsa_SidArray num_sids : 0x00000002 (2) sids : * sids: ARRAY(2) [0]: struct lsa_SidPtr sid : * sid : S-1-5-21-662975699-1857117334-953900138-500 [1]: struct lsa_SidPtr sid : * sid : S-1-5-21-662975699-1857117334-953900138-512 result : NT_STATUS_OK samr_Close: struct samr_Close in: struct samr_Close handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 24e17f20-5e2a-41e4-9354-9fbf6432f866 samr_Close: struct samr_Close out: struct samr_Close handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : NT_STATUS_OK Testing OpenAlias(551) samr_OpenAlias: struct samr_OpenAlias in: struct samr_OpenAlias domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 access_mask : 0x02000000 (33554432) rid : 0x00000227 (551) samr_OpenAlias: struct samr_OpenAlias out: struct samr_OpenAlias alias_handle : * alias_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 22f25c18-72e6-4252-b400-23293de4cd94 result : NT_STATUS_OK samr_QuerySecurity: struct samr_QuerySecurity in: struct samr_QuerySecurity handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 22f25c18-72e6-4252-b400-23293de4cd94 sec_info : 0x00000007 (7) samr_QuerySecurity: struct samr_QuerySecurity out: struct samr_QuerySecurity sdbuf : * sdbuf: struct sec_desc_buf sd_size : 0x00000068 (104) sd : * sd: struct security_descriptor revision : SEC_DESC_REVISION_1 (1) type : 0x8004 (32772) 0: SEC_DESC_OWNER_DEFAULTED 0: SEC_DESC_GROUP_DEFAULTED 1: SEC_DESC_DACL_PRESENT 0: SEC_DESC_DACL_DEFAULTED 0: SEC_DESC_SACL_PRESENT 0: SEC_DESC_SACL_DEFAULTED 0: SEC_DESC_DACL_TRUSTED 0: SEC_DESC_SERVER_SECURITY 0: SEC_DESC_DACL_AUTO_INHERIT_REQ 0: SEC_DESC_SACL_AUTO_INHERIT_REQ 0: SEC_DESC_DACL_AUTO_INHERITED 0: SEC_DESC_SACL_AUTO_INHERITED 0: SEC_DESC_DACL_PROTECTED 0: SEC_DESC_SACL_PROTECTED 0: SEC_DESC_RM_CONTROL_VALID 1: SEC_DESC_SELF_RELATIVE owner_sid : * owner_sid : S-1-5-32-544 group_sid : * group_sid : S-1-5-32-544 sacl : * sacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0034 (52) num_aces : 0x00000002 (2) aces : * aces: ARRAY(2) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002000c (131084) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 dacl : * dacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0034 (52) num_aces : 0x00000002 (2) aces : * aces: ARRAY(2) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002000c (131084) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 result : NT_STATUS_OK samr_SetSecurity: struct samr_SetSecurity in: struct samr_SetSecurity handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 22f25c18-72e6-4252-b400-23293de4cd94 sec_info : 0x00000007 (7) sdbuf : * sdbuf: struct sec_desc_buf sd_size : 0x0000009c (156) sd : * sd: struct security_descriptor revision : SEC_DESC_REVISION_1 (1) type : 0x8004 (32772) 0: SEC_DESC_OWNER_DEFAULTED 0: SEC_DESC_GROUP_DEFAULTED 1: SEC_DESC_DACL_PRESENT 0: SEC_DESC_DACL_DEFAULTED 0: SEC_DESC_SACL_PRESENT 0: SEC_DESC_SACL_DEFAULTED 0: SEC_DESC_DACL_TRUSTED 0: SEC_DESC_SERVER_SECURITY 0: SEC_DESC_DACL_AUTO_INHERIT_REQ 0: SEC_DESC_SACL_AUTO_INHERIT_REQ 0: SEC_DESC_DACL_AUTO_INHERITED 0: SEC_DESC_SACL_AUTO_INHERITED 0: SEC_DESC_DACL_PROTECTED 0: SEC_DESC_SACL_PROTECTED 0: SEC_DESC_RM_CONTROL_VALID 1: SEC_DESC_SELF_RELATIVE owner_sid : * owner_sid : S-1-5-32-544 group_sid : * group_sid : S-1-5-32-544 sacl : * sacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0034 (52) num_aces : 0x00000002 (2) aces : * aces: ARRAY(2) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002000c (131084) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 dacl : * dacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0034 (52) num_aces : 0x00000002 (2) aces : * aces: ARRAY(2) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002000c (131084) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 samr_SetSecurity: struct samr_SetSecurity out: struct samr_SetSecurity result : NT_STATUS_OK samr_QuerySecurity: struct samr_QuerySecurity in: struct samr_QuerySecurity handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 22f25c18-72e6-4252-b400-23293de4cd94 sec_info : 0x00000007 (7) samr_QuerySecurity: struct samr_QuerySecurity out: struct samr_QuerySecurity sdbuf : * sdbuf: struct sec_desc_buf sd_size : 0x00000068 (104) sd : * sd: struct security_descriptor revision : SEC_DESC_REVISION_1 (1) type : 0x8004 (32772) 0: SEC_DESC_OWNER_DEFAULTED 0: SEC_DESC_GROUP_DEFAULTED 1: SEC_DESC_DACL_PRESENT 0: SEC_DESC_DACL_DEFAULTED 0: SEC_DESC_SACL_PRESENT 0: SEC_DESC_SACL_DEFAULTED 0: SEC_DESC_DACL_TRUSTED 0: SEC_DESC_SERVER_SECURITY 0: SEC_DESC_DACL_AUTO_INHERIT_REQ 0: SEC_DESC_SACL_AUTO_INHERIT_REQ 0: SEC_DESC_DACL_AUTO_INHERITED 0: SEC_DESC_SACL_AUTO_INHERITED 0: SEC_DESC_DACL_PROTECTED 0: SEC_DESC_SACL_PROTECTED 0: SEC_DESC_RM_CONTROL_VALID 1: SEC_DESC_SELF_RELATIVE owner_sid : * owner_sid : S-1-5-32-544 group_sid : * group_sid : S-1-5-32-544 sacl : * sacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0034 (52) num_aces : 0x00000002 (2) aces : * aces: ARRAY(2) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002000c (131084) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 dacl : * dacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0034 (52) num_aces : 0x00000002 (2) aces : * aces: ARRAY(2) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002000c (131084) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 result : NT_STATUS_OK Testing QueryAliasInfo level 1 samr_QueryAliasInfo: struct samr_QueryAliasInfo in: struct samr_QueryAliasInfo alias_handle : * alias_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 22f25c18-72e6-4252-b400-23293de4cd94 level : AliasInfoAll (1) samr_QueryAliasInfo: struct samr_QueryAliasInfo out: struct samr_QueryAliasInfo info : * info : union samr_AliasInfo(case 1) all: struct samr_AliasInfoAll name: struct samr_String length : 0x0020 (32) size : 0x0020 (32) string : * string : 'Backup Operators' num_members : 0x00000000 (0) description: struct samr_String length : 0x0062 (98) size : 0x0062 (98) string : * string : 'Members can bypass file security to back up files' result : NT_STATUS_OK Testing QueryAliasInfo level 2 samr_QueryAliasInfo: struct samr_QueryAliasInfo in: struct samr_QueryAliasInfo alias_handle : * alias_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 22f25c18-72e6-4252-b400-23293de4cd94 level : AliasInfoName (2) samr_QueryAliasInfo: struct samr_QueryAliasInfo out: struct samr_QueryAliasInfo info : * info : union samr_AliasInfo(case 2) name: struct samr_String length : 0x0020 (32) size : 0x0020 (32) string : * string : 'Backup Operators' result : NT_STATUS_OK Testing QueryAliasInfo level 3 samr_QueryAliasInfo: struct samr_QueryAliasInfo in: struct samr_QueryAliasInfo alias_handle : * alias_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 22f25c18-72e6-4252-b400-23293de4cd94 level : AliasInfoDescription (3) samr_QueryAliasInfo: struct samr_QueryAliasInfo out: struct samr_QueryAliasInfo info : * info : union samr_AliasInfo(case 3) description: struct samr_String length : 0x0062 (98) size : 0x0062 (98) string : * string : 'Members can bypass file security to back up files' result : NT_STATUS_OK Testing GetMembersInAlias samr_GetMembersInAlias: struct samr_GetMembersInAlias in: struct samr_GetMembersInAlias alias_handle : * alias_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 22f25c18-72e6-4252-b400-23293de4cd94 samr_GetMembersInAlias: struct samr_GetMembersInAlias out: struct samr_GetMembersInAlias sids : * sids: struct lsa_SidArray num_sids : 0x00000000 (0) sids : NULL result : NT_STATUS_OK samr_Close: struct samr_Close in: struct samr_Close handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 22f25c18-72e6-4252-b400-23293de4cd94 samr_Close: struct samr_Close out: struct samr_Close handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : NT_STATUS_OK Testing OpenAlias(546) samr_OpenAlias: struct samr_OpenAlias in: struct samr_OpenAlias domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 access_mask : 0x02000000 (33554432) rid : 0x00000222 (546) samr_OpenAlias: struct samr_OpenAlias out: struct samr_OpenAlias alias_handle : * alias_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 4a3ddeb1-839a-434a-8b52-5619a100cbf4 result : NT_STATUS_OK samr_QuerySecurity: struct samr_QuerySecurity in: struct samr_QuerySecurity handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 4a3ddeb1-839a-434a-8b52-5619a100cbf4 sec_info : 0x00000007 (7) samr_QuerySecurity: struct samr_QuerySecurity out: struct samr_QuerySecurity sdbuf : * sdbuf: struct sec_desc_buf sd_size : 0x00000098 (152) sd : * sd: struct security_descriptor revision : SEC_DESC_REVISION_1 (1) type : 0x8004 (32772) 0: SEC_DESC_OWNER_DEFAULTED 0: SEC_DESC_GROUP_DEFAULTED 1: SEC_DESC_DACL_PRESENT 0: SEC_DESC_DACL_DEFAULTED 0: SEC_DESC_SACL_PRESENT 0: SEC_DESC_SACL_DEFAULTED 0: SEC_DESC_DACL_TRUSTED 0: SEC_DESC_SERVER_SECURITY 0: SEC_DESC_DACL_AUTO_INHERIT_REQ 0: SEC_DESC_SACL_AUTO_INHERIT_REQ 0: SEC_DESC_DACL_AUTO_INHERITED 0: SEC_DESC_SACL_AUTO_INHERITED 0: SEC_DESC_DACL_PROTECTED 0: SEC_DESC_SACL_PROTECTED 0: SEC_DESC_RM_CONTROL_VALID 1: SEC_DESC_SELF_RELATIVE owner_sid : * owner_sid : S-1-5-32-544 group_sid : * group_sid : S-1-5-32-544 sacl : * sacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0064 (100) num_aces : 0x00000004 (4) aces : * aces: ARRAY(4) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002000c (131084) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 [2]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-548 [3]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-547 dacl : * dacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0064 (100) num_aces : 0x00000004 (4) aces : * aces: ARRAY(4) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002000c (131084) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 [2]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-548 [3]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-547 result : NT_STATUS_OK samr_SetSecurity: struct samr_SetSecurity in: struct samr_SetSecurity handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 4a3ddeb1-839a-434a-8b52-5619a100cbf4 sec_info : 0x00000007 (7) sdbuf : * sdbuf: struct sec_desc_buf sd_size : 0x000000fc (252) sd : * sd: struct security_descriptor revision : SEC_DESC_REVISION_1 (1) type : 0x8004 (32772) 0: SEC_DESC_OWNER_DEFAULTED 0: SEC_DESC_GROUP_DEFAULTED 1: SEC_DESC_DACL_PRESENT 0: SEC_DESC_DACL_DEFAULTED 0: SEC_DESC_SACL_PRESENT 0: SEC_DESC_SACL_DEFAULTED 0: SEC_DESC_DACL_TRUSTED 0: SEC_DESC_SERVER_SECURITY 0: SEC_DESC_DACL_AUTO_INHERIT_REQ 0: SEC_DESC_SACL_AUTO_INHERIT_REQ 0: SEC_DESC_DACL_AUTO_INHERITED 0: SEC_DESC_SACL_AUTO_INHERITED 0: SEC_DESC_DACL_PROTECTED 0: SEC_DESC_SACL_PROTECTED 0: SEC_DESC_RM_CONTROL_VALID 1: SEC_DESC_SELF_RELATIVE owner_sid : * owner_sid : S-1-5-32-544 group_sid : * group_sid : S-1-5-32-544 sacl : * sacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0064 (100) num_aces : 0x00000004 (4) aces : * aces: ARRAY(4) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002000c (131084) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 [2]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-548 [3]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-547 dacl : * dacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0064 (100) num_aces : 0x00000004 (4) aces : * aces: ARRAY(4) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002000c (131084) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 [2]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-548 [3]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-547 samr_SetSecurity: struct samr_SetSecurity out: struct samr_SetSecurity result : NT_STATUS_OK samr_QuerySecurity: struct samr_QuerySecurity in: struct samr_QuerySecurity handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 4a3ddeb1-839a-434a-8b52-5619a100cbf4 sec_info : 0x00000007 (7) samr_QuerySecurity: struct samr_QuerySecurity out: struct samr_QuerySecurity sdbuf : * sdbuf: struct sec_desc_buf sd_size : 0x00000098 (152) sd : * sd: struct security_descriptor revision : SEC_DESC_REVISION_1 (1) type : 0x8004 (32772) 0: SEC_DESC_OWNER_DEFAULTED 0: SEC_DESC_GROUP_DEFAULTED 1: SEC_DESC_DACL_PRESENT 0: SEC_DESC_DACL_DEFAULTED 0: SEC_DESC_SACL_PRESENT 0: SEC_DESC_SACL_DEFAULTED 0: SEC_DESC_DACL_TRUSTED 0: SEC_DESC_SERVER_SECURITY 0: SEC_DESC_DACL_AUTO_INHERIT_REQ 0: SEC_DESC_SACL_AUTO_INHERIT_REQ 0: SEC_DESC_DACL_AUTO_INHERITED 0: SEC_DESC_SACL_AUTO_INHERITED 0: SEC_DESC_DACL_PROTECTED 0: SEC_DESC_SACL_PROTECTED 0: SEC_DESC_RM_CONTROL_VALID 1: SEC_DESC_SELF_RELATIVE owner_sid : * owner_sid : S-1-5-32-544 group_sid : * group_sid : S-1-5-32-544 sacl : * sacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0064 (100) num_aces : 0x00000004 (4) aces : * aces: ARRAY(4) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002000c (131084) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 [2]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-548 [3]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-547 dacl : * dacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0064 (100) num_aces : 0x00000004 (4) aces : * aces: ARRAY(4) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002000c (131084) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 [2]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-548 [3]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-547 result : NT_STATUS_OK Testing QueryAliasInfo level 1 samr_QueryAliasInfo: struct samr_QueryAliasInfo in: struct samr_QueryAliasInfo alias_handle : * alias_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 4a3ddeb1-839a-434a-8b52-5619a100cbf4 level : AliasInfoAll (1) samr_QueryAliasInfo: struct samr_QueryAliasInfo out: struct samr_QueryAliasInfo info : * info : union samr_AliasInfo(case 1) all: struct samr_AliasInfoAll name: struct samr_String length : 0x000c (12) size : 0x000c (12) string : * string : 'Guests' num_members : 0x00000001 (1) description: struct samr_String length : 0x0062 (98) size : 0x0062 (98) string : * string : 'Users granted guest access to the computer/domain' result : NT_STATUS_OK Testing QueryAliasInfo level 2 samr_QueryAliasInfo: struct samr_QueryAliasInfo in: struct samr_QueryAliasInfo alias_handle : * alias_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 4a3ddeb1-839a-434a-8b52-5619a100cbf4 level : AliasInfoName (2) samr_QueryAliasInfo: struct samr_QueryAliasInfo out: struct samr_QueryAliasInfo info : * info : union samr_AliasInfo(case 2) name: struct samr_String length : 0x000c (12) size : 0x000c (12) string : * string : 'Guests' result : NT_STATUS_OK Testing QueryAliasInfo level 3 samr_QueryAliasInfo: struct samr_QueryAliasInfo in: struct samr_QueryAliasInfo alias_handle : * alias_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 4a3ddeb1-839a-434a-8b52-5619a100cbf4 level : AliasInfoDescription (3) samr_QueryAliasInfo: struct samr_QueryAliasInfo out: struct samr_QueryAliasInfo info : * info : union samr_AliasInfo(case 3) description: struct samr_String length : 0x0062 (98) size : 0x0062 (98) string : * string : 'Users granted guest access to the computer/domain' result : NT_STATUS_OK Testing GetMembersInAlias samr_GetMembersInAlias: struct samr_GetMembersInAlias in: struct samr_GetMembersInAlias alias_handle : * alias_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 4a3ddeb1-839a-434a-8b52-5619a100cbf4 samr_GetMembersInAlias: struct samr_GetMembersInAlias out: struct samr_GetMembersInAlias sids : * sids: struct lsa_SidArray num_sids : 0x00000001 (1) sids : * sids: ARRAY(1) [0]: struct lsa_SidPtr sid : * sid : S-1-5-21-662975699-1857117334-953900138-514 result : NT_STATUS_OK samr_Close: struct samr_Close in: struct samr_Close handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 4a3ddeb1-839a-434a-8b52-5619a100cbf4 samr_Close: struct samr_Close out: struct samr_Close handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : NT_STATUS_OK Testing OpenAlias(550) samr_OpenAlias: struct samr_OpenAlias in: struct samr_OpenAlias domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 access_mask : 0x02000000 (33554432) rid : 0x00000226 (550) samr_OpenAlias: struct samr_OpenAlias out: struct samr_OpenAlias alias_handle : * alias_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : e63812af-de43-47b5-bd46-2f28ace75105 result : NT_STATUS_OK samr_QuerySecurity: struct samr_QuerySecurity in: struct samr_QuerySecurity handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : e63812af-de43-47b5-bd46-2f28ace75105 sec_info : 0x00000007 (7) samr_QuerySecurity: struct samr_QuerySecurity out: struct samr_QuerySecurity sdbuf : * sdbuf: struct sec_desc_buf sd_size : 0x00000068 (104) sd : * sd: struct security_descriptor revision : SEC_DESC_REVISION_1 (1) type : 0x8004 (32772) 0: SEC_DESC_OWNER_DEFAULTED 0: SEC_DESC_GROUP_DEFAULTED 1: SEC_DESC_DACL_PRESENT 0: SEC_DESC_DACL_DEFAULTED 0: SEC_DESC_SACL_PRESENT 0: SEC_DESC_SACL_DEFAULTED 0: SEC_DESC_DACL_TRUSTED 0: SEC_DESC_SERVER_SECURITY 0: SEC_DESC_DACL_AUTO_INHERIT_REQ 0: SEC_DESC_SACL_AUTO_INHERIT_REQ 0: SEC_DESC_DACL_AUTO_INHERITED 0: SEC_DESC_SACL_AUTO_INHERITED 0: SEC_DESC_DACL_PROTECTED 0: SEC_DESC_SACL_PROTECTED 0: SEC_DESC_RM_CONTROL_VALID 1: SEC_DESC_SELF_RELATIVE owner_sid : * owner_sid : S-1-5-32-544 group_sid : * group_sid : S-1-5-32-544 sacl : * sacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0034 (52) num_aces : 0x00000002 (2) aces : * aces: ARRAY(2) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002000c (131084) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 dacl : * dacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0034 (52) num_aces : 0x00000002 (2) aces : * aces: ARRAY(2) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002000c (131084) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 result : NT_STATUS_OK samr_SetSecurity: struct samr_SetSecurity in: struct samr_SetSecurity handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : e63812af-de43-47b5-bd46-2f28ace75105 sec_info : 0x00000007 (7) sdbuf : * sdbuf: struct sec_desc_buf sd_size : 0x0000009c (156) sd : * sd: struct security_descriptor revision : SEC_DESC_REVISION_1 (1) type : 0x8004 (32772) 0: SEC_DESC_OWNER_DEFAULTED 0: SEC_DESC_GROUP_DEFAULTED 1: SEC_DESC_DACL_PRESENT 0: SEC_DESC_DACL_DEFAULTED 0: SEC_DESC_SACL_PRESENT 0: SEC_DESC_SACL_DEFAULTED 0: SEC_DESC_DACL_TRUSTED 0: SEC_DESC_SERVER_SECURITY 0: SEC_DESC_DACL_AUTO_INHERIT_REQ 0: SEC_DESC_SACL_AUTO_INHERIT_REQ 0: SEC_DESC_DACL_AUTO_INHERITED 0: SEC_DESC_SACL_AUTO_INHERITED 0: SEC_DESC_DACL_PROTECTED 0: SEC_DESC_SACL_PROTECTED 0: SEC_DESC_RM_CONTROL_VALID 1: SEC_DESC_SELF_RELATIVE owner_sid : * owner_sid : S-1-5-32-544 group_sid : * group_sid : S-1-5-32-544 sacl : * sacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0034 (52) num_aces : 0x00000002 (2) aces : * aces: ARRAY(2) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002000c (131084) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 dacl : * dacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0034 (52) num_aces : 0x00000002 (2) aces : * aces: ARRAY(2) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002000c (131084) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 samr_SetSecurity: struct samr_SetSecurity out: struct samr_SetSecurity result : NT_STATUS_OK samr_QuerySecurity: struct samr_QuerySecurity in: struct samr_QuerySecurity handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : e63812af-de43-47b5-bd46-2f28ace75105 sec_info : 0x00000007 (7) samr_QuerySecurity: struct samr_QuerySecurity out: struct samr_QuerySecurity sdbuf : * sdbuf: struct sec_desc_buf sd_size : 0x00000068 (104) sd : * sd: struct security_descriptor revision : SEC_DESC_REVISION_1 (1) type : 0x8004 (32772) 0: SEC_DESC_OWNER_DEFAULTED 0: SEC_DESC_GROUP_DEFAULTED 1: SEC_DESC_DACL_PRESENT 0: SEC_DESC_DACL_DEFAULTED 0: SEC_DESC_SACL_PRESENT 0: SEC_DESC_SACL_DEFAULTED 0: SEC_DESC_DACL_TRUSTED 0: SEC_DESC_SERVER_SECURITY 0: SEC_DESC_DACL_AUTO_INHERIT_REQ 0: SEC_DESC_SACL_AUTO_INHERIT_REQ 0: SEC_DESC_DACL_AUTO_INHERITED 0: SEC_DESC_SACL_AUTO_INHERITED 0: SEC_DESC_DACL_PROTECTED 0: SEC_DESC_SACL_PROTECTED 0: SEC_DESC_RM_CONTROL_VALID 1: SEC_DESC_SELF_RELATIVE owner_sid : * owner_sid : S-1-5-32-544 group_sid : * group_sid : S-1-5-32-544 sacl : * sacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0034 (52) num_aces : 0x00000002 (2) aces : * aces: ARRAY(2) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002000c (131084) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 dacl : * dacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0034 (52) num_aces : 0x00000002 (2) aces : * aces: ARRAY(2) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002000c (131084) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 result : NT_STATUS_OK Testing QueryAliasInfo level 1 samr_QueryAliasInfo: struct samr_QueryAliasInfo in: struct samr_QueryAliasInfo alias_handle : * alias_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : e63812af-de43-47b5-bd46-2f28ace75105 level : AliasInfoAll (1) samr_QueryAliasInfo: struct samr_QueryAliasInfo out: struct samr_QueryAliasInfo info : * info : union samr_AliasInfo(case 1) all: struct samr_AliasInfoAll name: struct samr_String length : 0x001e (30) size : 0x001e (30) string : * string : 'Print Operators' num_members : 0x00000000 (0) description: struct samr_String length : 0x004c (76) size : 0x004c (76) string : * string : 'Members can administer domain printers' result : NT_STATUS_OK Testing QueryAliasInfo level 2 samr_QueryAliasInfo: struct samr_QueryAliasInfo in: struct samr_QueryAliasInfo alias_handle : * alias_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : e63812af-de43-47b5-bd46-2f28ace75105 level : AliasInfoName (2) samr_QueryAliasInfo: struct samr_QueryAliasInfo out: struct samr_QueryAliasInfo info : * info : union samr_AliasInfo(case 2) name: struct samr_String length : 0x001e (30) size : 0x001e (30) string : * string : 'Print Operators' result : NT_STATUS_OK Testing QueryAliasInfo level 3 samr_QueryAliasInfo: struct samr_QueryAliasInfo in: struct samr_QueryAliasInfo alias_handle : * alias_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : e63812af-de43-47b5-bd46-2f28ace75105 level : AliasInfoDescription (3) samr_QueryAliasInfo: struct samr_QueryAliasInfo out: struct samr_QueryAliasInfo info : * info : union samr_AliasInfo(case 3) description: struct samr_String length : 0x004c (76) size : 0x004c (76) string : * string : 'Members can administer domain printers' result : NT_STATUS_OK Testing GetMembersInAlias samr_GetMembersInAlias: struct samr_GetMembersInAlias in: struct samr_GetMembersInAlias alias_handle : * alias_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : e63812af-de43-47b5-bd46-2f28ace75105 samr_GetMembersInAlias: struct samr_GetMembersInAlias out: struct samr_GetMembersInAlias sids : * sids: struct lsa_SidArray num_sids : 0x00000000 (0) sids : NULL result : NT_STATUS_OK samr_Close: struct samr_Close in: struct samr_Close handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : e63812af-de43-47b5-bd46-2f28ace75105 samr_Close: struct samr_Close out: struct samr_Close handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : NT_STATUS_OK Testing OpenAlias(552) samr_OpenAlias: struct samr_OpenAlias in: struct samr_OpenAlias domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 access_mask : 0x02000000 (33554432) rid : 0x00000228 (552) samr_OpenAlias: struct samr_OpenAlias out: struct samr_OpenAlias alias_handle : * alias_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : acca21a8-20b6-4266-8032-d62b98233de7 result : NT_STATUS_OK samr_QuerySecurity: struct samr_QuerySecurity in: struct samr_QuerySecurity handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : acca21a8-20b6-4266-8032-d62b98233de7 sec_info : 0x00000007 (7) samr_QuerySecurity: struct samr_QuerySecurity out: struct samr_QuerySecurity sdbuf : * sdbuf: struct sec_desc_buf sd_size : 0x00000080 (128) sd : * sd: struct security_descriptor revision : SEC_DESC_REVISION_1 (1) type : 0x8004 (32772) 0: SEC_DESC_OWNER_DEFAULTED 0: SEC_DESC_GROUP_DEFAULTED 1: SEC_DESC_DACL_PRESENT 0: SEC_DESC_DACL_DEFAULTED 0: SEC_DESC_SACL_PRESENT 0: SEC_DESC_SACL_DEFAULTED 0: SEC_DESC_DACL_TRUSTED 0: SEC_DESC_SERVER_SECURITY 0: SEC_DESC_DACL_AUTO_INHERIT_REQ 0: SEC_DESC_SACL_AUTO_INHERIT_REQ 0: SEC_DESC_DACL_AUTO_INHERITED 0: SEC_DESC_SACL_AUTO_INHERITED 0: SEC_DESC_DACL_PROTECTED 0: SEC_DESC_SACL_PROTECTED 0: SEC_DESC_RM_CONTROL_VALID 1: SEC_DESC_SELF_RELATIVE owner_sid : * owner_sid : S-1-5-32-544 group_sid : * group_sid : S-1-5-32-544 sacl : * sacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x004c (76) num_aces : 0x00000003 (3) aces : * aces: ARRAY(3) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002000c (131084) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 [2]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-548 dacl : * dacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x004c (76) num_aces : 0x00000003 (3) aces : * aces: ARRAY(3) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002000c (131084) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 [2]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-548 result : NT_STATUS_OK samr_SetSecurity: struct samr_SetSecurity in: struct samr_SetSecurity handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : acca21a8-20b6-4266-8032-d62b98233de7 sec_info : 0x00000007 (7) sdbuf : * sdbuf: struct sec_desc_buf sd_size : 0x000000cc (204) sd : * sd: struct security_descriptor revision : SEC_DESC_REVISION_1 (1) type : 0x8004 (32772) 0: SEC_DESC_OWNER_DEFAULTED 0: SEC_DESC_GROUP_DEFAULTED 1: SEC_DESC_DACL_PRESENT 0: SEC_DESC_DACL_DEFAULTED 0: SEC_DESC_SACL_PRESENT 0: SEC_DESC_SACL_DEFAULTED 0: SEC_DESC_DACL_TRUSTED 0: SEC_DESC_SERVER_SECURITY 0: SEC_DESC_DACL_AUTO_INHERIT_REQ 0: SEC_DESC_SACL_AUTO_INHERIT_REQ 0: SEC_DESC_DACL_AUTO_INHERITED 0: SEC_DESC_SACL_AUTO_INHERITED 0: SEC_DESC_DACL_PROTECTED 0: SEC_DESC_SACL_PROTECTED 0: SEC_DESC_RM_CONTROL_VALID 1: SEC_DESC_SELF_RELATIVE owner_sid : * owner_sid : S-1-5-32-544 group_sid : * group_sid : S-1-5-32-544 sacl : * sacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x004c (76) num_aces : 0x00000003 (3) aces : * aces: ARRAY(3) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002000c (131084) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 [2]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-548 dacl : * dacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x004c (76) num_aces : 0x00000003 (3) aces : * aces: ARRAY(3) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002000c (131084) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 [2]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-548 samr_SetSecurity: struct samr_SetSecurity out: struct samr_SetSecurity result : NT_STATUS_OK samr_QuerySecurity: struct samr_QuerySecurity in: struct samr_QuerySecurity handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : acca21a8-20b6-4266-8032-d62b98233de7 sec_info : 0x00000007 (7) samr_QuerySecurity: struct samr_QuerySecurity out: struct samr_QuerySecurity sdbuf : * sdbuf: struct sec_desc_buf sd_size : 0x00000080 (128) sd : * sd: struct security_descriptor revision : SEC_DESC_REVISION_1 (1) type : 0x8004 (32772) 0: SEC_DESC_OWNER_DEFAULTED 0: SEC_DESC_GROUP_DEFAULTED 1: SEC_DESC_DACL_PRESENT 0: SEC_DESC_DACL_DEFAULTED 0: SEC_DESC_SACL_PRESENT 0: SEC_DESC_SACL_DEFAULTED 0: SEC_DESC_DACL_TRUSTED 0: SEC_DESC_SERVER_SECURITY 0: SEC_DESC_DACL_AUTO_INHERIT_REQ 0: SEC_DESC_SACL_AUTO_INHERIT_REQ 0: SEC_DESC_DACL_AUTO_INHERITED 0: SEC_DESC_SACL_AUTO_INHERITED 0: SEC_DESC_DACL_PROTECTED 0: SEC_DESC_SACL_PROTECTED 0: SEC_DESC_RM_CONTROL_VALID 1: SEC_DESC_SELF_RELATIVE owner_sid : * owner_sid : S-1-5-32-544 group_sid : * group_sid : S-1-5-32-544 sacl : * sacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x004c (76) num_aces : 0x00000003 (3) aces : * aces: ARRAY(3) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002000c (131084) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 [2]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-548 dacl : * dacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x004c (76) num_aces : 0x00000003 (3) aces : * aces: ARRAY(3) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002000c (131084) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 [2]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-548 result : NT_STATUS_OK Testing QueryAliasInfo level 1 samr_QueryAliasInfo: struct samr_QueryAliasInfo in: struct samr_QueryAliasInfo alias_handle : * alias_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : acca21a8-20b6-4266-8032-d62b98233de7 level : AliasInfoAll (1) samr_QueryAliasInfo: struct samr_QueryAliasInfo out: struct samr_QueryAliasInfo info : * info : union samr_AliasInfo(case 1) all: struct samr_AliasInfoAll name: struct samr_String length : 0x0014 (20) size : 0x0014 (20) string : * string : 'Replicator' num_members : 0x00000000 (0) description: struct samr_String length : 0x004a (74) size : 0x004a (74) string : * string : 'Supports file replication in a domain' result : NT_STATUS_OK Testing QueryAliasInfo level 2 samr_QueryAliasInfo: struct samr_QueryAliasInfo in: struct samr_QueryAliasInfo alias_handle : * alias_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : acca21a8-20b6-4266-8032-d62b98233de7 level : AliasInfoName (2) samr_QueryAliasInfo: struct samr_QueryAliasInfo out: struct samr_QueryAliasInfo info : * info : union samr_AliasInfo(case 2) name: struct samr_String length : 0x0014 (20) size : 0x0014 (20) string : * string : 'Replicator' result : NT_STATUS_OK Testing QueryAliasInfo level 3 samr_QueryAliasInfo: struct samr_QueryAliasInfo in: struct samr_QueryAliasInfo alias_handle : * alias_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : acca21a8-20b6-4266-8032-d62b98233de7 level : AliasInfoDescription (3) samr_QueryAliasInfo: struct samr_QueryAliasInfo out: struct samr_QueryAliasInfo info : * info : union samr_AliasInfo(case 3) description: struct samr_String length : 0x004a (74) size : 0x004a (74) string : * string : 'Supports file replication in a domain' result : NT_STATUS_OK Testing GetMembersInAlias samr_GetMembersInAlias: struct samr_GetMembersInAlias in: struct samr_GetMembersInAlias alias_handle : * alias_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : acca21a8-20b6-4266-8032-d62b98233de7 samr_GetMembersInAlias: struct samr_GetMembersInAlias out: struct samr_GetMembersInAlias sids : * sids: struct lsa_SidArray num_sids : 0x00000000 (0) sids : NULL result : NT_STATUS_OK samr_Close: struct samr_Close in: struct samr_Close handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : acca21a8-20b6-4266-8032-d62b98233de7 samr_Close: struct samr_Close out: struct samr_Close handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : NT_STATUS_OK Testing OpenAlias(549) samr_OpenAlias: struct samr_OpenAlias in: struct samr_OpenAlias domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 access_mask : 0x02000000 (33554432) rid : 0x00000225 (549) samr_OpenAlias: struct samr_OpenAlias out: struct samr_OpenAlias alias_handle : * alias_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 290f011b-6d42-4271-bdfa-59a3e827b9c2 result : NT_STATUS_OK samr_QuerySecurity: struct samr_QuerySecurity in: struct samr_QuerySecurity handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 290f011b-6d42-4271-bdfa-59a3e827b9c2 sec_info : 0x00000007 (7) samr_QuerySecurity: struct samr_QuerySecurity out: struct samr_QuerySecurity sdbuf : * sdbuf: struct sec_desc_buf sd_size : 0x00000068 (104) sd : * sd: struct security_descriptor revision : SEC_DESC_REVISION_1 (1) type : 0x8004 (32772) 0: SEC_DESC_OWNER_DEFAULTED 0: SEC_DESC_GROUP_DEFAULTED 1: SEC_DESC_DACL_PRESENT 0: SEC_DESC_DACL_DEFAULTED 0: SEC_DESC_SACL_PRESENT 0: SEC_DESC_SACL_DEFAULTED 0: SEC_DESC_DACL_TRUSTED 0: SEC_DESC_SERVER_SECURITY 0: SEC_DESC_DACL_AUTO_INHERIT_REQ 0: SEC_DESC_SACL_AUTO_INHERIT_REQ 0: SEC_DESC_DACL_AUTO_INHERITED 0: SEC_DESC_SACL_AUTO_INHERITED 0: SEC_DESC_DACL_PROTECTED 0: SEC_DESC_SACL_PROTECTED 0: SEC_DESC_RM_CONTROL_VALID 1: SEC_DESC_SELF_RELATIVE owner_sid : * owner_sid : S-1-5-32-544 group_sid : * group_sid : S-1-5-32-544 sacl : * sacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0034 (52) num_aces : 0x00000002 (2) aces : * aces: ARRAY(2) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002000c (131084) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 dacl : * dacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0034 (52) num_aces : 0x00000002 (2) aces : * aces: ARRAY(2) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002000c (131084) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 result : NT_STATUS_OK samr_SetSecurity: struct samr_SetSecurity in: struct samr_SetSecurity handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 290f011b-6d42-4271-bdfa-59a3e827b9c2 sec_info : 0x00000007 (7) sdbuf : * sdbuf: struct sec_desc_buf sd_size : 0x0000009c (156) sd : * sd: struct security_descriptor revision : SEC_DESC_REVISION_1 (1) type : 0x8004 (32772) 0: SEC_DESC_OWNER_DEFAULTED 0: SEC_DESC_GROUP_DEFAULTED 1: SEC_DESC_DACL_PRESENT 0: SEC_DESC_DACL_DEFAULTED 0: SEC_DESC_SACL_PRESENT 0: SEC_DESC_SACL_DEFAULTED 0: SEC_DESC_DACL_TRUSTED 0: SEC_DESC_SERVER_SECURITY 0: SEC_DESC_DACL_AUTO_INHERIT_REQ 0: SEC_DESC_SACL_AUTO_INHERIT_REQ 0: SEC_DESC_DACL_AUTO_INHERITED 0: SEC_DESC_SACL_AUTO_INHERITED 0: SEC_DESC_DACL_PROTECTED 0: SEC_DESC_SACL_PROTECTED 0: SEC_DESC_RM_CONTROL_VALID 1: SEC_DESC_SELF_RELATIVE owner_sid : * owner_sid : S-1-5-32-544 group_sid : * group_sid : S-1-5-32-544 sacl : * sacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0034 (52) num_aces : 0x00000002 (2) aces : * aces: ARRAY(2) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002000c (131084) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 dacl : * dacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0034 (52) num_aces : 0x00000002 (2) aces : * aces: ARRAY(2) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002000c (131084) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 samr_SetSecurity: struct samr_SetSecurity out: struct samr_SetSecurity result : NT_STATUS_OK samr_QuerySecurity: struct samr_QuerySecurity in: struct samr_QuerySecurity handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 290f011b-6d42-4271-bdfa-59a3e827b9c2 sec_info : 0x00000007 (7) samr_QuerySecurity: struct samr_QuerySecurity out: struct samr_QuerySecurity sdbuf : * sdbuf: struct sec_desc_buf sd_size : 0x00000068 (104) sd : * sd: struct security_descriptor revision : SEC_DESC_REVISION_1 (1) type : 0x8004 (32772) 0: SEC_DESC_OWNER_DEFAULTED 0: SEC_DESC_GROUP_DEFAULTED 1: SEC_DESC_DACL_PRESENT 0: SEC_DESC_DACL_DEFAULTED 0: SEC_DESC_SACL_PRESENT 0: SEC_DESC_SACL_DEFAULTED 0: SEC_DESC_DACL_TRUSTED 0: SEC_DESC_SERVER_SECURITY 0: SEC_DESC_DACL_AUTO_INHERIT_REQ 0: SEC_DESC_SACL_AUTO_INHERIT_REQ 0: SEC_DESC_DACL_AUTO_INHERITED 0: SEC_DESC_SACL_AUTO_INHERITED 0: SEC_DESC_DACL_PROTECTED 0: SEC_DESC_SACL_PROTECTED 0: SEC_DESC_RM_CONTROL_VALID 1: SEC_DESC_SELF_RELATIVE owner_sid : * owner_sid : S-1-5-32-544 group_sid : * group_sid : S-1-5-32-544 sacl : * sacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0034 (52) num_aces : 0x00000002 (2) aces : * aces: ARRAY(2) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002000c (131084) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 dacl : * dacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0034 (52) num_aces : 0x00000002 (2) aces : * aces: ARRAY(2) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002000c (131084) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 result : NT_STATUS_OK Testing QueryAliasInfo level 1 samr_QueryAliasInfo: struct samr_QueryAliasInfo in: struct samr_QueryAliasInfo alias_handle : * alias_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 290f011b-6d42-4271-bdfa-59a3e827b9c2 level : AliasInfoAll (1) samr_QueryAliasInfo: struct samr_QueryAliasInfo out: struct samr_QueryAliasInfo info : * info : union samr_AliasInfo(case 1) all: struct samr_AliasInfoAll name: struct samr_String length : 0x0020 (32) size : 0x0020 (32) string : * string : 'Server Operators' num_members : 0x00000000 (0) description: struct samr_String length : 0x004a (74) size : 0x004a (74) string : * string : 'Members can administer domain servers' result : NT_STATUS_OK Testing QueryAliasInfo level 2 samr_QueryAliasInfo: struct samr_QueryAliasInfo in: struct samr_QueryAliasInfo alias_handle : * alias_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 290f011b-6d42-4271-bdfa-59a3e827b9c2 level : AliasInfoName (2) samr_QueryAliasInfo: struct samr_QueryAliasInfo out: struct samr_QueryAliasInfo info : * info : union samr_AliasInfo(case 2) name: struct samr_String length : 0x0020 (32) size : 0x0020 (32) string : * string : 'Server Operators' result : NT_STATUS_OK Testing QueryAliasInfo level 3 samr_QueryAliasInfo: struct samr_QueryAliasInfo in: struct samr_QueryAliasInfo alias_handle : * alias_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 290f011b-6d42-4271-bdfa-59a3e827b9c2 level : AliasInfoDescription (3) samr_QueryAliasInfo: struct samr_QueryAliasInfo out: struct samr_QueryAliasInfo info : * info : union samr_AliasInfo(case 3) description: struct samr_String length : 0x004a (74) size : 0x004a (74) string : * string : 'Members can administer domain servers' result : NT_STATUS_OK Testing GetMembersInAlias samr_GetMembersInAlias: struct samr_GetMembersInAlias in: struct samr_GetMembersInAlias alias_handle : * alias_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 290f011b-6d42-4271-bdfa-59a3e827b9c2 samr_GetMembersInAlias: struct samr_GetMembersInAlias out: struct samr_GetMembersInAlias sids : * sids: struct lsa_SidArray num_sids : 0x00000000 (0) sids : NULL result : NT_STATUS_OK samr_Close: struct samr_Close in: struct samr_Close handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 290f011b-6d42-4271-bdfa-59a3e827b9c2 samr_Close: struct samr_Close out: struct samr_Close handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : NT_STATUS_OK Testing OpenAlias(545) samr_OpenAlias: struct samr_OpenAlias in: struct samr_OpenAlias domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 access_mask : 0x02000000 (33554432) rid : 0x00000221 (545) samr_OpenAlias: struct samr_OpenAlias out: struct samr_OpenAlias alias_handle : * alias_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : a034402e-a7e7-48e8-8705-ed6736bf5522 result : NT_STATUS_OK samr_QuerySecurity: struct samr_QuerySecurity in: struct samr_QuerySecurity handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : a034402e-a7e7-48e8-8705-ed6736bf5522 sec_info : 0x00000007 (7) samr_QuerySecurity: struct samr_QuerySecurity out: struct samr_QuerySecurity sdbuf : * sdbuf: struct sec_desc_buf sd_size : 0x00000098 (152) sd : * sd: struct security_descriptor revision : SEC_DESC_REVISION_1 (1) type : 0x8004 (32772) 0: SEC_DESC_OWNER_DEFAULTED 0: SEC_DESC_GROUP_DEFAULTED 1: SEC_DESC_DACL_PRESENT 0: SEC_DESC_DACL_DEFAULTED 0: SEC_DESC_SACL_PRESENT 0: SEC_DESC_SACL_DEFAULTED 0: SEC_DESC_DACL_TRUSTED 0: SEC_DESC_SERVER_SECURITY 0: SEC_DESC_DACL_AUTO_INHERIT_REQ 0: SEC_DESC_SACL_AUTO_INHERIT_REQ 0: SEC_DESC_DACL_AUTO_INHERITED 0: SEC_DESC_SACL_AUTO_INHERITED 0: SEC_DESC_DACL_PROTECTED 0: SEC_DESC_SACL_PROTECTED 0: SEC_DESC_RM_CONTROL_VALID 1: SEC_DESC_SELF_RELATIVE owner_sid : * owner_sid : S-1-5-32-544 group_sid : * group_sid : S-1-5-32-544 sacl : * sacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0064 (100) num_aces : 0x00000004 (4) aces : * aces: ARRAY(4) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002000c (131084) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 [2]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-548 [3]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-547 dacl : * dacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0064 (100) num_aces : 0x00000004 (4) aces : * aces: ARRAY(4) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002000c (131084) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 [2]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-548 [3]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-547 result : NT_STATUS_OK samr_SetSecurity: struct samr_SetSecurity in: struct samr_SetSecurity handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : a034402e-a7e7-48e8-8705-ed6736bf5522 sec_info : 0x00000007 (7) sdbuf : * sdbuf: struct sec_desc_buf sd_size : 0x000000fc (252) sd : * sd: struct security_descriptor revision : SEC_DESC_REVISION_1 (1) type : 0x8004 (32772) 0: SEC_DESC_OWNER_DEFAULTED 0: SEC_DESC_GROUP_DEFAULTED 1: SEC_DESC_DACL_PRESENT 0: SEC_DESC_DACL_DEFAULTED 0: SEC_DESC_SACL_PRESENT 0: SEC_DESC_SACL_DEFAULTED 0: SEC_DESC_DACL_TRUSTED 0: SEC_DESC_SERVER_SECURITY 0: SEC_DESC_DACL_AUTO_INHERIT_REQ 0: SEC_DESC_SACL_AUTO_INHERIT_REQ 0: SEC_DESC_DACL_AUTO_INHERITED 0: SEC_DESC_SACL_AUTO_INHERITED 0: SEC_DESC_DACL_PROTECTED 0: SEC_DESC_SACL_PROTECTED 0: SEC_DESC_RM_CONTROL_VALID 1: SEC_DESC_SELF_RELATIVE owner_sid : * owner_sid : S-1-5-32-544 group_sid : * group_sid : S-1-5-32-544 sacl : * sacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0064 (100) num_aces : 0x00000004 (4) aces : * aces: ARRAY(4) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002000c (131084) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 [2]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-548 [3]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-547 dacl : * dacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0064 (100) num_aces : 0x00000004 (4) aces : * aces: ARRAY(4) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002000c (131084) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 [2]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-548 [3]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-547 samr_SetSecurity: struct samr_SetSecurity out: struct samr_SetSecurity result : NT_STATUS_OK samr_QuerySecurity: struct samr_QuerySecurity in: struct samr_QuerySecurity handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : a034402e-a7e7-48e8-8705-ed6736bf5522 sec_info : 0x00000007 (7) samr_QuerySecurity: struct samr_QuerySecurity out: struct samr_QuerySecurity sdbuf : * sdbuf: struct sec_desc_buf sd_size : 0x00000098 (152) sd : * sd: struct security_descriptor revision : SEC_DESC_REVISION_1 (1) type : 0x8004 (32772) 0: SEC_DESC_OWNER_DEFAULTED 0: SEC_DESC_GROUP_DEFAULTED 1: SEC_DESC_DACL_PRESENT 0: SEC_DESC_DACL_DEFAULTED 0: SEC_DESC_SACL_PRESENT 0: SEC_DESC_SACL_DEFAULTED 0: SEC_DESC_DACL_TRUSTED 0: SEC_DESC_SERVER_SECURITY 0: SEC_DESC_DACL_AUTO_INHERIT_REQ 0: SEC_DESC_SACL_AUTO_INHERIT_REQ 0: SEC_DESC_DACL_AUTO_INHERITED 0: SEC_DESC_SACL_AUTO_INHERITED 0: SEC_DESC_DACL_PROTECTED 0: SEC_DESC_SACL_PROTECTED 0: SEC_DESC_RM_CONTROL_VALID 1: SEC_DESC_SELF_RELATIVE owner_sid : * owner_sid : S-1-5-32-544 group_sid : * group_sid : S-1-5-32-544 sacl : * sacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0064 (100) num_aces : 0x00000004 (4) aces : * aces: ARRAY(4) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002000c (131084) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 [2]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-548 [3]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-547 dacl : * dacl: struct security_acl revision : NT4_ACL_REVISION (2) size : 0x0064 (100) num_aces : 0x00000004 (4) aces : * aces: ARRAY(4) [0]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0014 (20) access_mask : 0x0002000c (131084) trustee : S-1-1-0 [1]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-544 [2]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-548 [3]: struct security_ace type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags : 0x00 (0) 0: SEC_ACE_FLAG_OBJECT_INHERIT 0: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0: SEC_ACE_FLAG_VALID_INHERIT 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0018 (24) access_mask : 0x000f001f (983071) trustee : S-1-5-32-547 result : NT_STATUS_OK Testing QueryAliasInfo level 1 samr_QueryAliasInfo: struct samr_QueryAliasInfo in: struct samr_QueryAliasInfo alias_handle : * alias_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : a034402e-a7e7-48e8-8705-ed6736bf5522 level : AliasInfoAll (1) samr_QueryAliasInfo: struct samr_QueryAliasInfo out: struct samr_QueryAliasInfo info : * info : union samr_AliasInfo(case 1) all: struct samr_AliasInfoAll name: struct samr_String length : 0x000a (10) size : 0x000a (10) string : * string : 'Users' num_members : 0x00000001 (1) description: struct samr_String length : 0x001c (28) size : 0x001c (28) string : * string : 'Ordinary users' result : NT_STATUS_OK Testing QueryAliasInfo level 2 samr_QueryAliasInfo: struct samr_QueryAliasInfo in: struct samr_QueryAliasInfo alias_handle : * alias_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : a034402e-a7e7-48e8-8705-ed6736bf5522 level : AliasInfoName (2) samr_QueryAliasInfo: struct samr_QueryAliasInfo out: struct samr_QueryAliasInfo info : * info : union samr_AliasInfo(case 2) name: struct samr_String length : 0x000a (10) size : 0x000a (10) string : * string : 'Users' result : NT_STATUS_OK Testing QueryAliasInfo level 3 samr_QueryAliasInfo: struct samr_QueryAliasInfo in: struct samr_QueryAliasInfo alias_handle : * alias_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : a034402e-a7e7-48e8-8705-ed6736bf5522 level : AliasInfoDescription (3) samr_QueryAliasInfo: struct samr_QueryAliasInfo out: struct samr_QueryAliasInfo info : * info : union samr_AliasInfo(case 3) description: struct samr_String length : 0x001c (28) size : 0x001c (28) string : * string : 'Ordinary users' result : NT_STATUS_OK Testing GetMembersInAlias samr_GetMembersInAlias: struct samr_GetMembersInAlias in: struct samr_GetMembersInAlias alias_handle : * alias_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : a034402e-a7e7-48e8-8705-ed6736bf5522 samr_GetMembersInAlias: struct samr_GetMembersInAlias out: struct samr_GetMembersInAlias sids : * sids: struct lsa_SidArray num_sids : 0x00000001 (1) sids : * sids: ARRAY(1) [0]: struct lsa_SidPtr sid : * sid : S-1-5-21-662975699-1857117334-953900138-513 result : NT_STATUS_OK samr_Close: struct samr_Close in: struct samr_Close handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : a034402e-a7e7-48e8-8705-ed6736bf5522 samr_Close: struct samr_Close out: struct samr_Close handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : NT_STATUS_OK Testing QueryDisplayInfo level 1 samr_QueryDisplayInfo: struct samr_QueryDisplayInfo in: struct samr_QueryDisplayInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0001 (1) start_idx : 0x00000000 (0) max_entries : 0x000003e8 (1000) buf_size : 0xffffffff (4294967295) samr_QueryDisplayInfo: struct samr_QueryDisplayInfo out: struct samr_QueryDisplayInfo total_size : 0x00000000 (0) returned_size : 0x00000000 (0) info : union samr_DispInfo(case 1) info1: struct samr_DispInfoGeneral count : 0x00000000 (0) entries : NULL result : NT_STATUS_OK Testing QueryDisplayInfo level 2 samr_QueryDisplayInfo: struct samr_QueryDisplayInfo in: struct samr_QueryDisplayInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0002 (2) start_idx : 0x00000000 (0) max_entries : 0x000003e8 (1000) buf_size : 0xffffffff (4294967295) samr_QueryDisplayInfo: struct samr_QueryDisplayInfo out: struct samr_QueryDisplayInfo total_size : 0x00000000 (0) returned_size : 0x00000000 (0) info : union samr_DispInfo(case 2) info2: struct samr_DispInfoFull count : 0x00000000 (0) entries : NULL result : NT_STATUS_OK Testing QueryDisplayInfo level 3 samr_QueryDisplayInfo: struct samr_QueryDisplayInfo in: struct samr_QueryDisplayInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0003 (3) start_idx : 0x00000000 (0) max_entries : 0x000003e8 (1000) buf_size : 0xffffffff (4294967295) samr_QueryDisplayInfo: struct samr_QueryDisplayInfo out: struct samr_QueryDisplayInfo total_size : 0x00000000 (0) returned_size : 0x00000000 (0) info : union samr_DispInfo(case 3) info3: struct samr_DispInfoFull count : 0x00000000 (0) entries : NULL result : NT_STATUS_OK Testing QueryDisplayInfo level 4 samr_QueryDisplayInfo: struct samr_QueryDisplayInfo in: struct samr_QueryDisplayInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0004 (4) start_idx : 0x00000000 (0) max_entries : 0x000003e8 (1000) buf_size : 0xffffffff (4294967295) samr_QueryDisplayInfo: struct samr_QueryDisplayInfo out: struct samr_QueryDisplayInfo total_size : 0x00000000 (0) returned_size : 0x00000000 (0) info : union samr_DispInfo(case 4) info4: struct samr_DispInfoAscii count : 0x00000000 (0) entries : NULL result : NT_STATUS_OK Testing QueryDisplayInfo level 5 samr_QueryDisplayInfo: struct samr_QueryDisplayInfo in: struct samr_QueryDisplayInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0005 (5) start_idx : 0x00000000 (0) max_entries : 0x000003e8 (1000) buf_size : 0xffffffff (4294967295) samr_QueryDisplayInfo: struct samr_QueryDisplayInfo out: struct samr_QueryDisplayInfo total_size : 0x00000000 (0) returned_size : 0x00000000 (0) info : union samr_DispInfo(case 5) info5: struct samr_DispInfoAscii count : 0x00000000 (0) entries : NULL result : NT_STATUS_OK Testing QueryDisplayInfo2 level 1 samr_QueryDisplayInfo2: struct samr_QueryDisplayInfo2 in: struct samr_QueryDisplayInfo2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0001 (1) start_idx : 0x00000000 (0) max_entries : 0x000003e8 (1000) buf_size : 0xffffffff (4294967295) samr_QueryDisplayInfo2: struct samr_QueryDisplayInfo2 out: struct samr_QueryDisplayInfo2 total_size : 0x00000000 (0) returned_size : 0x00000000 (0) info : union samr_DispInfo(case 1) info1: struct samr_DispInfoGeneral count : 0x00000000 (0) entries : NULL result : NT_STATUS_OK Testing QueryDisplayInfo2 level 2 samr_QueryDisplayInfo2: struct samr_QueryDisplayInfo2 in: struct samr_QueryDisplayInfo2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0002 (2) start_idx : 0x00000000 (0) max_entries : 0x000003e8 (1000) buf_size : 0xffffffff (4294967295) samr_QueryDisplayInfo2: struct samr_QueryDisplayInfo2 out: struct samr_QueryDisplayInfo2 total_size : 0x00000000 (0) returned_size : 0x00000000 (0) info : union samr_DispInfo(case 2) info2: struct samr_DispInfoFull count : 0x00000000 (0) entries : NULL result : NT_STATUS_OK Testing QueryDisplayInfo2 level 3 samr_QueryDisplayInfo2: struct samr_QueryDisplayInfo2 in: struct samr_QueryDisplayInfo2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0003 (3) start_idx : 0x00000000 (0) max_entries : 0x000003e8 (1000) buf_size : 0xffffffff (4294967295) samr_QueryDisplayInfo2: struct samr_QueryDisplayInfo2 out: struct samr_QueryDisplayInfo2 total_size : 0x00000000 (0) returned_size : 0x00000000 (0) info : union samr_DispInfo(case 3) info3: struct samr_DispInfoFull count : 0x00000000 (0) entries : NULL result : NT_STATUS_OK Testing QueryDisplayInfo2 level 4 samr_QueryDisplayInfo2: struct samr_QueryDisplayInfo2 in: struct samr_QueryDisplayInfo2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0004 (4) start_idx : 0x00000000 (0) max_entries : 0x000003e8 (1000) buf_size : 0xffffffff (4294967295) samr_QueryDisplayInfo2: struct samr_QueryDisplayInfo2 out: struct samr_QueryDisplayInfo2 total_size : 0x00000000 (0) returned_size : 0x00000000 (0) info : union samr_DispInfo(case 4) info4: struct samr_DispInfoAscii count : 0x00000000 (0) entries : NULL result : NT_STATUS_OK Testing QueryDisplayInfo2 level 5 samr_QueryDisplayInfo2: struct samr_QueryDisplayInfo2 in: struct samr_QueryDisplayInfo2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0005 (5) start_idx : 0x00000000 (0) max_entries : 0x000003e8 (1000) buf_size : 0xffffffff (4294967295) samr_QueryDisplayInfo2: struct samr_QueryDisplayInfo2 out: struct samr_QueryDisplayInfo2 total_size : 0x00000000 (0) returned_size : 0x00000000 (0) info : union samr_DispInfo(case 5) info5: struct samr_DispInfoAscii count : 0x00000000 (0) entries : NULL result : NT_STATUS_OK Testing QueryDisplayInfo3 level 1 samr_QueryDisplayInfo3: struct samr_QueryDisplayInfo3 in: struct samr_QueryDisplayInfo3 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0001 (1) start_idx : 0x00000000 (0) max_entries : 0x000003e8 (1000) buf_size : 0xffffffff (4294967295) samr_QueryDisplayInfo3: struct samr_QueryDisplayInfo3 out: struct samr_QueryDisplayInfo3 total_size : 0x00000000 (0) returned_size : 0x00000000 (0) info : union samr_DispInfo(case 1) info1: struct samr_DispInfoGeneral count : 0x00000000 (0) entries : NULL result : NT_STATUS_OK Testing QueryDisplayInfo3 level 2 samr_QueryDisplayInfo3: struct samr_QueryDisplayInfo3 in: struct samr_QueryDisplayInfo3 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0002 (2) start_idx : 0x00000000 (0) max_entries : 0x000003e8 (1000) buf_size : 0xffffffff (4294967295) samr_QueryDisplayInfo3: struct samr_QueryDisplayInfo3 out: struct samr_QueryDisplayInfo3 total_size : 0x00000000 (0) returned_size : 0x00000000 (0) info : union samr_DispInfo(case 2) info2: struct samr_DispInfoFull count : 0x00000000 (0) entries : NULL result : NT_STATUS_OK Testing QueryDisplayInfo3 level 3 samr_QueryDisplayInfo3: struct samr_QueryDisplayInfo3 in: struct samr_QueryDisplayInfo3 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0003 (3) start_idx : 0x00000000 (0) max_entries : 0x000003e8 (1000) buf_size : 0xffffffff (4294967295) samr_QueryDisplayInfo3: struct samr_QueryDisplayInfo3 out: struct samr_QueryDisplayInfo3 total_size : 0x00000000 (0) returned_size : 0x00000000 (0) info : union samr_DispInfo(case 3) info3: struct samr_DispInfoFull count : 0x00000000 (0) entries : NULL result : NT_STATUS_OK Testing QueryDisplayInfo3 level 4 samr_QueryDisplayInfo3: struct samr_QueryDisplayInfo3 in: struct samr_QueryDisplayInfo3 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0004 (4) start_idx : 0x00000000 (0) max_entries : 0x000003e8 (1000) buf_size : 0xffffffff (4294967295) samr_QueryDisplayInfo3: struct samr_QueryDisplayInfo3 out: struct samr_QueryDisplayInfo3 total_size : 0x00000000 (0) returned_size : 0x00000000 (0) info : union samr_DispInfo(case 4) info4: struct samr_DispInfoAscii count : 0x00000000 (0) entries : NULL result : NT_STATUS_OK Testing QueryDisplayInfo3 level 5 samr_QueryDisplayInfo3: struct samr_QueryDisplayInfo3 in: struct samr_QueryDisplayInfo3 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0005 (5) start_idx : 0x00000000 (0) max_entries : 0x000003e8 (1000) buf_size : 0xffffffff (4294967295) samr_QueryDisplayInfo3: struct samr_QueryDisplayInfo3 out: struct samr_QueryDisplayInfo3 total_size : 0x00000000 (0) returned_size : 0x00000000 (0) info : union samr_DispInfo(case 5) info5: struct samr_DispInfoAscii count : 0x00000000 (0) entries : NULL result : NT_STATUS_OK Testing GetDisplayEnumerationIndex level 1 samr_GetDisplayEnumerationIndex: struct samr_GetDisplayEnumerationIndex in: struct samr_GetDisplayEnumerationIndex domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0001 (1) name: struct samr_String length : 0x001e (30) size : 0x001e (30) string : * string : 'samrtorturetest' samr_GetDisplayEnumerationIndex: struct samr_GetDisplayEnumerationIndex out: struct samr_GetDisplayEnumerationIndex idx : 0x00000000 (0) result : NT_STATUS_NO_MORE_ENTRIES samr_GetDisplayEnumerationIndex: struct samr_GetDisplayEnumerationIndex in: struct samr_GetDisplayEnumerationIndex domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0001 (1) name: struct samr_String length : 0x0010 (16) size : 0x0010 (16) string : * string : 'zzzzzzzz' samr_GetDisplayEnumerationIndex: struct samr_GetDisplayEnumerationIndex out: struct samr_GetDisplayEnumerationIndex idx : 0x00000000 (0) result : NT_STATUS_NO_MORE_ENTRIES Testing GetDisplayEnumerationIndex level 2 samr_GetDisplayEnumerationIndex: struct samr_GetDisplayEnumerationIndex in: struct samr_GetDisplayEnumerationIndex domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0002 (2) name: struct samr_String length : 0x001e (30) size : 0x001e (30) string : * string : 'samrtorturetest' samr_GetDisplayEnumerationIndex: struct samr_GetDisplayEnumerationIndex out: struct samr_GetDisplayEnumerationIndex idx : 0x00000000 (0) result : NT_STATUS_NO_MORE_ENTRIES samr_GetDisplayEnumerationIndex: struct samr_GetDisplayEnumerationIndex in: struct samr_GetDisplayEnumerationIndex domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0002 (2) name: struct samr_String length : 0x0010 (16) size : 0x0010 (16) string : * string : 'zzzzzzzz' samr_GetDisplayEnumerationIndex: struct samr_GetDisplayEnumerationIndex out: struct samr_GetDisplayEnumerationIndex idx : 0x00000000 (0) result : NT_STATUS_NO_MORE_ENTRIES Testing GetDisplayEnumerationIndex level 3 samr_GetDisplayEnumerationIndex: struct samr_GetDisplayEnumerationIndex in: struct samr_GetDisplayEnumerationIndex domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0003 (3) name: struct samr_String length : 0x001e (30) size : 0x001e (30) string : * string : 'samrtorturetest' samr_GetDisplayEnumerationIndex: struct samr_GetDisplayEnumerationIndex out: struct samr_GetDisplayEnumerationIndex idx : 0x00000000 (0) result : NT_STATUS_NO_MORE_ENTRIES samr_GetDisplayEnumerationIndex: struct samr_GetDisplayEnumerationIndex in: struct samr_GetDisplayEnumerationIndex domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0003 (3) name: struct samr_String length : 0x0010 (16) size : 0x0010 (16) string : * string : 'zzzzzzzz' samr_GetDisplayEnumerationIndex: struct samr_GetDisplayEnumerationIndex out: struct samr_GetDisplayEnumerationIndex idx : 0x00000000 (0) result : NT_STATUS_NO_MORE_ENTRIES Testing GetDisplayEnumerationIndex level 4 samr_GetDisplayEnumerationIndex: struct samr_GetDisplayEnumerationIndex in: struct samr_GetDisplayEnumerationIndex domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0004 (4) name: struct samr_String length : 0x001e (30) size : 0x001e (30) string : * string : 'samrtorturetest' samr_GetDisplayEnumerationIndex: struct samr_GetDisplayEnumerationIndex out: struct samr_GetDisplayEnumerationIndex idx : 0x00159aa0 (1415840) result : NT_STATUS_INVALID_INFO_CLASS samr_GetDisplayEnumerationIndex: struct samr_GetDisplayEnumerationIndex in: struct samr_GetDisplayEnumerationIndex domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0004 (4) name: struct samr_String length : 0x0010 (16) size : 0x0010 (16) string : * string : 'zzzzzzzz' samr_GetDisplayEnumerationIndex: struct samr_GetDisplayEnumerationIndex out: struct samr_GetDisplayEnumerationIndex idx : 0x00159aa0 (1415840) result : NT_STATUS_INVALID_INFO_CLASS Testing GetDisplayEnumerationIndex level 5 samr_GetDisplayEnumerationIndex: struct samr_GetDisplayEnumerationIndex in: struct samr_GetDisplayEnumerationIndex domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0005 (5) name: struct samr_String length : 0x001e (30) size : 0x001e (30) string : * string : 'samrtorturetest' samr_GetDisplayEnumerationIndex: struct samr_GetDisplayEnumerationIndex out: struct samr_GetDisplayEnumerationIndex idx : 0x00159aa0 (1415840) result : NT_STATUS_INVALID_INFO_CLASS samr_GetDisplayEnumerationIndex: struct samr_GetDisplayEnumerationIndex in: struct samr_GetDisplayEnumerationIndex domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0005 (5) name: struct samr_String length : 0x0010 (16) size : 0x0010 (16) string : * string : 'zzzzzzzz' samr_GetDisplayEnumerationIndex: struct samr_GetDisplayEnumerationIndex out: struct samr_GetDisplayEnumerationIndex idx : 0x00159aa0 (1415840) result : NT_STATUS_INVALID_INFO_CLASS Testing GetDisplayEnumerationIndex2 level 1 samr_GetDisplayEnumerationIndex2: struct samr_GetDisplayEnumerationIndex2 in: struct samr_GetDisplayEnumerationIndex2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0001 (1) name: struct samr_String length : 0x001e (30) size : 0x001e (30) string : * string : 'samrtorturetest' samr_GetDisplayEnumerationIndex2: struct samr_GetDisplayEnumerationIndex2 out: struct samr_GetDisplayEnumerationIndex2 idx : 0x00000000 (0) result : NT_STATUS_NO_MORE_ENTRIES samr_GetDisplayEnumerationIndex2: struct samr_GetDisplayEnumerationIndex2 in: struct samr_GetDisplayEnumerationIndex2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0001 (1) name: struct samr_String length : 0x0010 (16) size : 0x0010 (16) string : * string : 'zzzzzzzz' samr_GetDisplayEnumerationIndex2: struct samr_GetDisplayEnumerationIndex2 out: struct samr_GetDisplayEnumerationIndex2 idx : 0x00000000 (0) result : NT_STATUS_NO_MORE_ENTRIES Testing GetDisplayEnumerationIndex2 level 2 samr_GetDisplayEnumerationIndex2: struct samr_GetDisplayEnumerationIndex2 in: struct samr_GetDisplayEnumerationIndex2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0002 (2) name: struct samr_String length : 0x001e (30) size : 0x001e (30) string : * string : 'samrtorturetest' samr_GetDisplayEnumerationIndex2: struct samr_GetDisplayEnumerationIndex2 out: struct samr_GetDisplayEnumerationIndex2 idx : 0x00000000 (0) result : NT_STATUS_NO_MORE_ENTRIES samr_GetDisplayEnumerationIndex2: struct samr_GetDisplayEnumerationIndex2 in: struct samr_GetDisplayEnumerationIndex2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0002 (2) name: struct samr_String length : 0x0010 (16) size : 0x0010 (16) string : * string : 'zzzzzzzz' samr_GetDisplayEnumerationIndex2: struct samr_GetDisplayEnumerationIndex2 out: struct samr_GetDisplayEnumerationIndex2 idx : 0x00000000 (0) result : NT_STATUS_NO_MORE_ENTRIES Testing GetDisplayEnumerationIndex2 level 3 samr_GetDisplayEnumerationIndex2: struct samr_GetDisplayEnumerationIndex2 in: struct samr_GetDisplayEnumerationIndex2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0003 (3) name: struct samr_String length : 0x001e (30) size : 0x001e (30) string : * string : 'samrtorturetest' samr_GetDisplayEnumerationIndex2: struct samr_GetDisplayEnumerationIndex2 out: struct samr_GetDisplayEnumerationIndex2 idx : 0x00000000 (0) result : NT_STATUS_NO_MORE_ENTRIES samr_GetDisplayEnumerationIndex2: struct samr_GetDisplayEnumerationIndex2 in: struct samr_GetDisplayEnumerationIndex2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0003 (3) name: struct samr_String length : 0x0010 (16) size : 0x0010 (16) string : * string : 'zzzzzzzz' samr_GetDisplayEnumerationIndex2: struct samr_GetDisplayEnumerationIndex2 out: struct samr_GetDisplayEnumerationIndex2 idx : 0x00000000 (0) result : NT_STATUS_NO_MORE_ENTRIES Testing GetDisplayEnumerationIndex2 level 4 samr_GetDisplayEnumerationIndex2: struct samr_GetDisplayEnumerationIndex2 in: struct samr_GetDisplayEnumerationIndex2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0004 (4) name: struct samr_String length : 0x001e (30) size : 0x001e (30) string : * string : 'samrtorturetest' samr_GetDisplayEnumerationIndex2: struct samr_GetDisplayEnumerationIndex2 out: struct samr_GetDisplayEnumerationIndex2 idx : 0x00159aa0 (1415840) result : NT_STATUS_INVALID_INFO_CLASS samr_GetDisplayEnumerationIndex2: struct samr_GetDisplayEnumerationIndex2 in: struct samr_GetDisplayEnumerationIndex2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0004 (4) name: struct samr_String length : 0x0010 (16) size : 0x0010 (16) string : * string : 'zzzzzzzz' samr_GetDisplayEnumerationIndex2: struct samr_GetDisplayEnumerationIndex2 out: struct samr_GetDisplayEnumerationIndex2 idx : 0x00159aa0 (1415840) result : NT_STATUS_INVALID_INFO_CLASS Testing GetDisplayEnumerationIndex2 level 5 samr_GetDisplayEnumerationIndex2: struct samr_GetDisplayEnumerationIndex2 in: struct samr_GetDisplayEnumerationIndex2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0005 (5) name: struct samr_String length : 0x001e (30) size : 0x001e (30) string : * string : 'samrtorturetest' samr_GetDisplayEnumerationIndex2: struct samr_GetDisplayEnumerationIndex2 out: struct samr_GetDisplayEnumerationIndex2 idx : 0x00159aa0 (1415840) result : NT_STATUS_INVALID_INFO_CLASS samr_GetDisplayEnumerationIndex2: struct samr_GetDisplayEnumerationIndex2 in: struct samr_GetDisplayEnumerationIndex2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0005 (5) name: struct samr_String length : 0x0010 (16) size : 0x0010 (16) string : * string : 'zzzzzzzz' samr_GetDisplayEnumerationIndex2: struct samr_GetDisplayEnumerationIndex2 out: struct samr_GetDisplayEnumerationIndex2 idx : 0x00159aa0 (1415840) result : NT_STATUS_INVALID_INFO_CLASS Testing coherency of querydispinfo vs enumdomgroups samr_EnumDomainGroups: struct samr_EnumDomainGroups in: struct samr_EnumDomainGroups domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 resume_handle : * resume_handle : 0x00000000 (0) max_size : 0x00000005 (5) samr_EnumDomainGroups: struct samr_EnumDomainGroups out: struct samr_EnumDomainGroups resume_handle : * resume_handle : 0x00000000 (0) sam : * sam: struct samr_SamArray count : 0x00000000 (0) entries : * entries: ARRAY(0) num_entries : 0x00000000 (0) result : NT_STATUS_OK samr_QueryDisplayInfo: struct samr_QueryDisplayInfo in: struct samr_QueryDisplayInfo domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 level : 0x0005 (5) start_idx : 0x00000000 (0) max_entries : 0x00000005 (5) buf_size : 0xffffffff (4294967295) samr_QueryDisplayInfo: struct samr_QueryDisplayInfo out: struct samr_QueryDisplayInfo total_size : 0x00000000 (0) returned_size : 0x00000000 (0) info : union samr_DispInfo(case 5) info5: struct samr_DispInfoAscii count : 0x00000000 (0) entries : NULL result : NT_STATUS_OK Testing TestPrivateFunctionsDomain samr_TestPrivateFunctionsDomain: struct samr_TestPrivateFunctionsDomain in: struct samr_TestPrivateFunctionsDomain domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 samr_TestPrivateFunctionsDomain: struct samr_TestPrivateFunctionsDomain out: struct samr_TestPrivateFunctionsDomain result : NT_STATUS_NOT_IMPLEMENTED Testing RidToSid samr_RidToSid: struct samr_RidToSid in: struct samr_RidToSid domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 rid : 0x00000200 (512) RidToSid failed - NT_STATUS_NET_WRITE_FAULT Testing GetBootKeyInformation samr_GetBootKeyInformation: struct samr_GetBootKeyInformation in: struct samr_GetBootKeyInformation domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 samr_GetBootKeyInformation: struct samr_GetBootKeyInformation out: struct samr_GetBootKeyInformation unknown : 0xc0000000 (3221225472) result : NT_STATUS_OK samr_Close: struct samr_Close in: struct samr_Close handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 18885af1-dd97-4685-967e-fc1689a77987 samr_Close: struct samr_Close out: struct samr_Close handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : NT_STATUS_OK testing samr_Connect samr_Connect: struct samr_Connect in: struct samr_Connect system_name : NULL access_mask : 0x02000000 (33554432) samr_Connect: struct samr_Connect out: struct samr_Connect connect_handle : * connect_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 433e5da0-83f4-4c8a-b0a4-1a6b7fc202ec result : NT_STATUS_OK testing samr_Connect2 samr_Connect2: struct samr_Connect2 in: struct samr_Connect2 system_name : NULL access_mask : 0x02000000 (33554432) samr_Connect2: struct samr_Connect2 out: struct samr_Connect2 connect_handle : * connect_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 8c1e436d-c2fe-421c-8d42-8af8384855aa result : NT_STATUS_OK samr_Close: struct samr_Close in: struct samr_Close handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 433e5da0-83f4-4c8a-b0a4-1a6b7fc202ec samr_Close: struct samr_Close out: struct samr_Close handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : NT_STATUS_OK testing samr_Connect3 samr_Connect3: struct samr_Connect3 in: struct samr_Connect3 system_name : NULL unknown : 0x00000000 (0) access_mask : 0x02000000 (33554432) Connect3 failed - NT_STATUS_NET_WRITE_FAULT testing samr_Connect4 samr_Connect4: struct samr_Connect4 in: struct samr_Connect4 system_name : * system_name : '' unknown : 0x00000000 (0) access_mask : 0x02000000 (33554432) Connect4 failed - NT_STATUS_NET_WRITE_FAULT testing samr_Connect5 samr_Connect5: struct samr_Connect5 in: struct samr_Connect5 system_name : * system_name : '' access_mask : 0x02000000 (33554432) level : 0x00000001 (1) info : * info : union samr_ConnectInfo(case 1) info1: struct samr_ConnectInfo1 unknown1 : 0x00000000 (0) unknown2 : 0x00000000 (0) Connect5 failed - NT_STATUS_NET_WRITE_FAULT samr_EnumDomains: struct samr_EnumDomains in: struct samr_EnumDomains connect_handle : * connect_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 8c1e436d-c2fe-421c-8d42-8af8384855aa resume_handle : * resume_handle : 0x00000002 (2) buf_size : 0xffffffff (4294967295) samr_EnumDomains: struct samr_EnumDomains out: struct samr_EnumDomains resume_handle : * resume_handle : 0x00000002 (2) sam : * sam: struct samr_SamArray count : 0x00000000 (0) entries : * entries: ARRAY(0) num_entries : 0x00000000 (0) result : NT_STATUS_OK samr_SetDsrmPassword disabled - enable dangerous tests to use samr_Shutdown disabled - enable dangerous tests to use samr_Close: struct samr_Close in: struct samr_Close handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 8c1e436d-c2fe-421c-8d42-8af8384855aa samr_Close: struct samr_Close out: struct samr_Close handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : NT_STATUS_OK TEST RPC-SAMR FAILED! RPC-SAMR took 5.12952 secs