policy database. LsarRemoveAccountRights (opnum Removes 38) rights from an account object in the server's policy database. LsarCreateAccount 10) The LsarCreateAccount method is invoked to create a new in the server's database. NTSTATUS LsarCreateAccount( [in] LSAPR_HANDLE PolicyHandle, [in] PRPC_SID AccountSid, [in] ACCESS_MASK DesiredAccess, [out] LSAPR_HANDLE* AccountHandle ); PolicyHandle: An context handle obtained from either or . AccountSid: The of the account to be created. DesiredAccess: A bitmask specifying accesses to be granted to the newly created and opened account at this time. AccountHandle: Used to return a handle to the newly created account object. Return Values: The following is a summary of the return values that an implementation MUST return, as specified by the message processing that follows. Return value/code Description 0x00000000 The request was successfully completed. STATUS_SUCCESS 0xC0000022 The caller does not have the permissions to perform this STATUS_ACCESS_DENIED operation. 0xC0000035 An account with this SID already exists. STATUS_OBJECT_NAME_COLLISION 0xC0000008 PolicyHandle is not a valid handle. STATUS_INVALID_HANDLE 0xC000000D Some of the parameters supplied were invalid. STATUS_INVALID_PARAMETER Processing: This message takes four arguments:
policy database. LsarRemoveAccountRights (opnum 38) Removes rights from an account object in the server's policy database. LsarCreateAccount 10) The LsarCreateAccount method is invoked to create a new in the server's database. NTSTATUS LsarCreateAccount( [in] LSAPR_HANDLE PolicyHandle, [in] PRPC_SID AccountSid, [in] ACCESS_MASK DesiredAccess, [out] LSAPR_HANDLE* AccountHandle ); PolicyHandle: An context handle obtained from either or . AccountSid: The of the account to be created. DesiredAccess: A bitmask specifying accesses to be granted to the newly created and opened account at this time. AccountHandle: Used to return a handle to the newly created account object. Return Values: The following is a summary of the return values that an implementation MUST return, as specified by the message processing that follows. Return value/code Description 0x00000000 STATUS_SUCCESS The request was successfully completed. 0xC0000022 STATUS_ACCESS_DENIED The caller does not have the permissions to perform this operation. 0xC0000035 STATUS_OBJECT_NAME_COLLISION An account with this SID already exists. 0xC0000008 STATUS_INVALID_HANDLE PolicyHandle is not a valid handle. 0xC000000D STATUS_INVALID_PARAMETER Some of the parameters supplied were invalid. Processing: This message takes four arguments:
%5BMS-LSAD%5D-170601.docx