<div class="content" name="LSAPR_TRUSTED_DOMAIN_INFORMATION_EX" uuid="f28f42b7-173c-4cda-9809-3fe4a5213ab3"><p>The LSAPR_TRUSTED_DOMAIN_INFORMATION_EX structure
communicates properties of a <span><a href="31ca2a31-0be4-4773-bcef-05ad6cd3ccfb#gt_f2f00d47-6cf2-4b32-b8f7-b63e38e2e9c4" data-linktype="relative-path">trusted domain</a></span>. The
following structure corresponds to the TrustedDomainInformationEx information
class. <span><a href="31ca2a31-0be4-4773-bcef-05ad6cd3ccfb#gt_b0276eb2-4e65-4cf1-a718-e0920a614aca" data-linktype="relative-path">Domain</a></span> <span><a href="31ca2a31-0be4-4773-bcef-05ad6cd3ccfb#gt_5ee032d0-d944-4acb-bbb5-b1cfc7df6db6" data-linktype="relative-path">trusts</a></span>
are specified in <span><a href="../ms-adts/d2435927-0999-4c62-8c6d-13ba31a52e1a" data-linktype="relative-path">[MS-ADTS]</a></span>
section <span><a href="../ms-adts/fe369d31-cc17-4ad7-849e-769403bc2c41" data-linktype="relative-path">6.1.6</a></span>.</p><dl>
<dd>
<div><pre> typedef struct _LSAPR_TRUSTED_DOMAIN_INFORMATION_EX {
   RPC_UNICODE_STRING Name;
   RPC_UNICODE_STRING FlatName;
   PRPC_SID Sid;
   unsigned long TrustDirection;
   unsigned long TrustType;
   unsigned long TrustAttributes;
 } LSAPR_TRUSTED_DOMAIN_INFORMATION_EX,
  *PLSAPR_TRUSTED_DOMAIN_INFORMATION_EX;
</pre></div>
</dd></dl><p><b>Name:</b>  The <span><a href="31ca2a31-0be4-4773-bcef-05ad6cd3ccfb#gt_102a36e2-f66f-49e2-bee3-558736b2ecd5" data-linktype="relative-path">DNS name</a></span> of the
domain. Maps to the <b>Name</b> field, as specified in section <span><a href="0228f75e-9725-479c-b4cd-1cacd667343c" data-linktype="relative-path">3.1.1.5</a></span>.</p><p><b>FlatName:</b>  The NetBIOS name of the
trusted domain, as specified in <span><a href="https://go.microsoft.com/fwlink/?LinkId=90266" data-linktype="external">[RFC1088]</a></span>. Maps
to the <b>Flat Name</b> field, as specified in section 3.1.1.5.</p><p><b>Sid:</b>  The domain <span><a href="31ca2a31-0be4-4773-bcef-05ad6cd3ccfb#gt_83f2020d-0804-4840-a5ac-e06439d50f8d" data-linktype="relative-path">SID</a></span>.
Maps to the <b>Security Identifier</b> field, as specified in section 3.1.1.5.</p><p><b>TrustDirection:</b>  This field contains
bitmapped values that define the properties of the direction of trust between
the local domain and the named domain. One or more of the valid flags can be
set. If all bits are 0, the trust is said to be disabled.</p><dl>
<dd>
<table>
 <tbody><tr>
  <th><p><br/>0</p></th>
  <th><p><br/>1</p></th>
  <th><p><br/>2</p></th>
  <th><p><br/>3</p></th>
  <th><p><br/>4</p></th>
  <th><p><br/>5</p></th>
  <th><p><br/>6</p></th>
  <th><p><br/>7</p></th>
  <th><p><br/>8</p></th>
  <th><p><br/>9</p></th>
  <th><p>1<br/>0</p></th>
  <th><p><br/>1</p></th>
  <th><p><br/>2</p></th>
  <th><p><br/>3</p></th>
  <th><p><br/>4</p></th>
  <th><p><br/>5</p></th>
  <th><p><br/>6</p></th>
  <th><p><br/>7</p></th>
  <th><p><br/>8</p></th>
  <th><p><br/>9</p></th>
  <th><p>2<br/>0</p></th>
  <th><p><br/>1</p></th>
  <th><p><br/>2</p></th>
  <th><p><br/>3</p></th>
  <th><p><br/>4</p></th>
  <th><p><br/>5</p></th>
  <th><p><br/>6</p></th>
  <th><p><br/>7</p></th>
  <th><p><br/>8</p></th>
  <th><p><br/>9</p></th>
  <th><p>3<br/>0</p></th>
  <th><p><br/>1</p></th>
 </tr>
 <tr>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>I</td>
  <td>O</td>
 </tr>
</tbody></table>
</dd>
<dd>
<p><b>I:</b> The trust is inbound.</p>
</dd>
<dd>
<p><b>O:</b> The trust is outbound.</p>
</dd>
<dd>
<p>All other bits SHOULD be 0 and ignored upon receipt.</p>
</dd>
<dd>
<p>Maps to the <b>Trust Direction</b> field, as
specified in section 3.1.1.5.</p>
</dd></dl><p><b>TrustType:</b>  This field specifies the
type of trust between the local domain and the named domain.</p><dl>
<dd>
<table><thead>
  <tr>
   <th>
   <p>Value</p>
   </th>
   <th>
   <p>Meaning</p>
   </th>
  </tr>
 </thead><tbody><tr>
  <td>0x00000001</td>
  <td>Trust with a Windows domain that is not running Active Directory.</td>
 </tr><tr>
  <td>0x00000002</td>
  <td>Trust with a Windows domain that is running Active Directory.</td>
 </tr><tr>
  <td>0x00000003</td>
  <td>Trust with a non–Windows-compliant Kerberos distribution, as specified in [RFC4120].</td>
 </tr><tr>
  <td>0x00000004</td>
  <td>Trust with a distributed computing environment (DCE) realm. This is a historical reference and is not used.</td>
 </tr></tbody></table>
</dd>
<dd>
<p><b>Note</b>  Other values SHOULD NOT be
set.</p>
</dd>
<dd>
<p>Maps to the <b>Trust Type</b> field, as specified in
section 3.1.1.5.</p>
</dd></dl><p><b>TrustAttributes:</b>  This field
contains bitmapped values that define the attributes of the trust.<a id="Appendix_A_Target_34"></a><a aria-label="Product behavior note 34" href="2a769a08-e023-459f-aebe-4fb3f595c0b7#Appendix_A_34" data-linktype="relative-path">&lt;34&gt;</a></p><dl>
<dd>
<table>
 <tbody><tr>
  <th><p><br/>0</p></th>
  <th><p><br/>1</p></th>
  <th><p><br/>2</p></th>
  <th><p><br/>3</p></th>
  <th><p><br/>4</p></th>
  <th><p><br/>5</p></th>
  <th><p><br/>6</p></th>
  <th><p><br/>7</p></th>
  <th><p><br/>8</p></th>
  <th><p><br/>9</p></th>
  <th><p>1<br/>0</p></th>
  <th><p><br/>1</p></th>
  <th><p><br/>2</p></th>
  <th><p><br/>3</p></th>
  <th><p><br/>4</p></th>
  <th><p><br/>5</p></th>
  <th><p><br/>6</p></th>
  <th><p><br/>7</p></th>
  <th><p><br/>8</p></th>
  <th><p><br/>9</p></th>
  <th><p>2<br/>0</p></th>
  <th><p><br/>1</p></th>
  <th><p><br/>2</p></th>
  <th><p><br/>3</p></th>
  <th><p><br/>4</p></th>
  <th><p><br/>5</p></th>
  <th><p><br/>6</p></th>
  <th><p><br/>7</p></th>
  <th><p><br/>8</p></th>
  <th><p><br/>9</p></th>
  <th><p>3<br/>0</p></th>
  <th><p><br/>1</p></th>
 </tr>
 <tr>
  <td>R</td>
  <td>R</td>
  <td>R</td>
  <td>R</td>
  <td>R</td>
  <td>R</td>
  <td>R</td>
  <td>R</td>
  <td>O</td>
  <td>O</td>
  <td>R</td>
  <td>R</td>
  <td>R</td>
  <td>R</td>
  <td>R</td>
  <td>R</td>
  <td>R</td>
  <td>R</td>
  <td>R</td>
  <td>R</td>
  <td>T A E C</td>
  <td>T A P T</td>
  <td>T A N C</td>
  <td>R</td>
  <td>T A R C</td>
  <td>T A T E</td>
  <td>T A W F</td>
  <td>T A C O</td>
  <td>T A F T</td>
  <td>T A Q D</td>
  <td>T A U O</td>
  <td>T A N T</td>
 </tr>
</tbody></table>
</dd>
<dd>
<p>TrustAttribute values are described in section
3.1.1.5. The following table shows how these values map to the Trust Attributes
field in section 3.1.1.5.</p>
</dd>
<dd>
<table><thead>
  <tr>
   <th>
   <p>Value</p>
   </th>
   <th>
   <p>Mapping</p>
   </th>
  </tr>
 </thead><tbody><tr>
  <td>TANT (TRUST_ATTRIBUTE_NON_TRANSITIVE)</td>
  <td>Trust Attributes: Non-transitive</td>
 </tr><tr>
  <td>TAUO (TRUST_ATTRIBUTE_UPLEVEL_ONLY)</td>
  <td>Trust Attributes: Uplevel only</td>
 </tr><tr>
  <td>TAQD (TRUST_ATTRIBUTE_QUARANTINED_DOMAIN)</td>
  <td>Trust Attributes: Quarantined</td>
 </tr><tr>
  <td>TAFT (TRUST_ATTRIBUTE_FOREST_TRANSITIVE)</td>
  <td>Trust Attributes: Forest trust</td>
 </tr><tr>
  <td>TACO (TRUST_ATTRIBUTE_CROSS_ORGANIZATION)</td>
  <td>Trust Attributes: Cross organization</td>
 </tr><tr>
  <td>TAWF (TRUST_ATTRIBUTE_WITHIN_FOREST)</td>
  <td>Trust Attributes: Within forest</td>
 </tr><tr>
  <td>TATE (TRUST_ATTRIBUTE_TREAT_AS_EXTERNAL)</td>
  <td>Trust Attributes: Treat as external</td>
 </tr><tr>
  <td>TARC (TRUST_ATTRIBUTE_USES_RC4_ENCRYPTION)</td>
  <td>Trust Attributes: Use RC4 Encryption (for more information about RC4, see [SCHNEIER] section 17.1).</td>
 </tr><tr>
  <td>TANC (TRUST_ATTRIBUTE_CROSS_ORGANIZATION_NO_TGT_DELEGATION)</td>
  <td>Trust Attributes: Do not trust tokens for delegation.</td>
 </tr><tr>
  <td>TAPT (TRUST_ATTRIBUTE_PIM_TRUST)</td>
  <td>Trust Attributes: PrivilegedIdentityManagement (PIM) trust.</td>
 </tr><tr>
  <td>TAEC (TRUST_ATTRIBUTE_CROSS_ORGANIZATION_ENABLE_TGT_DELEGATION)</td>
  <td>Trust Attributes: Tokens must be trusted for delegation.</td>
 </tr><tr>
  <td>O</td>
  <td>Obsolete. SHOULD be set to 0.</td>
 </tr><tr>
  <td>R</td>
  <td>Reserved for future use. SHOULD be set to zero.</td>
 </tr></tbody></table>
</dd></dl><p> </p></div>