The rules for domain information entries are as follows: The of this must not be equal to that of an enabled domain information entry belonging to a different forest or any of the domains that comprise the current forest. The NetBIOS name of this must not be claimed by any other forest with which this forest has a relationship or by any domain within the current forest. The DNS name of this entry must not be claimed by any other forest with which this forest has a trust relationship or by the current forest. If any of rules are violated, a domain information entry is considered to be in conflict. In this case, a collision record is generated with the following values: Index: Ordinal number of a forest trust record supplied by the caller that generated the collision. Type: CollisionTdo or CollisionXref, depending on whether the collision was caused by an or internal-to-forest domain. Flags: LSA_SID_DISABLED_CONFLICT if the collision was caused by a security identifier component of the record. LSA_NB_DISABLED_CONFLICT if the collision was caused by a NetBIOS name component of the record. Entries that have been disabled by administrative action or through conflict are not considered in computing consistency checks. Privilege Methods The message processing of methods in this section MUST use the abstract data model specified in section . Method (opnum) Summary LsarEnumeratePrivileges Enumerates (opnum 2) all known to the server. LsarLookupPrivilegeValue Maps the (opnum 31) well-known name of a privilege into the . LsarLookupPrivilegeName Maps the (opnum 32) LUID of a privilege into a privilege name. LsarLookupPrivilegeDisplayName Maps the 33) well-known name of a privilege into a
The rules for domain information entries are as follows: The of this must not be equal to that of an enabled domain information entry belonging to a different forest or any of the domains that comprise the current forest. The NetBIOS name of this must not be claimed by any other forest with which this forest has a relationship or by any domain within the current forest. The DNS name of this entry must not be claimed by any other forest with which this forest has a trust relationship or by the current forest. If any of rules are violated, a domain information entry is considered to be in conflict. In this case, a collision record is generated with the following values: Index: Ordinal number of a forest trust record supplied by the caller that generated the collision. Type: CollisionTdo or CollisionXref, depending on whether the collision was caused by an or internal-to-forest domain. Flags: LSA_SID_DISABLED_CONFLICT if the collision was caused by a security identifier component of the record. LSA_NB_DISABLED_CONFLICT if the collision was caused by a NetBIOS name component of the record. Entries that have been disabled by administrative action or through conflict are not considered in computing consistency checks. Privilege Methods The message processing of methods in this section MUST use the abstract data model specified in section . Method (opnum) Summary LsarEnumeratePrivileges (opnum 2) Enumerates all known to the server. LsarLookupPrivilegeValue (opnum 31) Maps the well-known name of a privilege into the . LsarLookupPrivilegeName (opnum 32) Maps the LUID of a privilege into a privilege name. LsarLookupPrivilegeDisplayName 33) Maps the well-known name of a privilege into a
%5BMS-LSAD%5D-170601.docx