<div class="content" name="NETLOGON_DELTA_ACCOUNTS" uuid="7f60a1a7-99d8-49ba-91c0-6e027237b009"><p>The <b>NETLOGON_DELTA_ACCOUNTS</b> structure contains the
settings and <span><a href="b5e7d25a-40b2-41c8-9611-98f53358af66#gt_d8092e10-b227-4b44-b015-511bb8178940" data-linktype="relative-path">privileges</a></span> for a <span><a href="b5e7d25a-40b2-41c8-9611-98f53358af66#gt_9e5f2104-d6df-4ae7-8a5c-6bd14a0da8fa" data-linktype="relative-path">Local
Security Authority (LSA)</a></span> account. This structure is used for
replicating the LSA account data from the <span><a href="b5e7d25a-40b2-41c8-9611-98f53358af66#gt_663cb13a-8b75-477f-b6e1-bea8f2fba64d" data-linktype="relative-path">primary domain controller (PDC)</a></span>
to a <span><a href="b5e7d25a-40b2-41c8-9611-98f53358af66#gt_ce1138c6-7ab4-4c37-98b4-95599071c3c3" data-linktype="relative-path">backup
domain controller (BDC)</a></span>.</p><dl>
<dd>
<div><pre> typedef struct _NETLOGON_DELTA_ACCOUNTS {
   ULONG PrivilegeEntries;
   ULONG PrivilegeControl;
   [size_is(PrivilegeEntries)] ULONG* PrivilegeAttributes;
   [size_is(PrivilegeEntries)] PUNICODE_STRING PrivilegeNames;
   NLPR_QUOTA_LIMITS QuotaLimits;
   ULONG SystemAccessFlags;
   SECURITY_INFORMATION SecurityInformation;
   ULONG SecuritySize;
   [size_is(SecuritySize)] UCHAR* SecurityDescriptor;
   UNICODE_STRING DummyString1;
   UNICODE_STRING DummyString2;
   UNICODE_STRING DummyString3;
   UNICODE_STRING DummyString4;
   ULONG DummyLong1;
   ULONG DummyLong2;
   ULONG DummyLong3;
   ULONG DummyLong4;
 } NETLOGON_DELTA_ACCOUNTS,
  *PNETLOGON_DELTA_ACCOUNTS;
</pre></div>
</dd></dl><p><b>PrivilegeEntries:</b> The number of privileges
associated with the LSA account.</p><p><b>PrivilegeControl:</b> A bit flag describing the
properties of the account privileges. A flag is TRUE (or set) if its value is
equal to 1. The <b>PrivilegeControl</b> value is as follows.</p><dl>
<dd>
<table>
 <tbody><tr>
  <th><p><br/>0</p></th>
  <th><p><br/>1</p></th>
  <th><p><br/>2</p></th>
  <th><p><br/>3</p></th>
  <th><p><br/>4</p></th>
  <th><p><br/>5</p></th>
  <th><p><br/>6</p></th>
  <th><p><br/>7</p></th>
  <th><p><br/>8</p></th>
  <th><p><br/>9</p></th>
  <th><p>1<br/>0</p></th>
  <th><p><br/>1</p></th>
  <th><p><br/>2</p></th>
  <th><p><br/>3</p></th>
  <th><p><br/>4</p></th>
  <th><p><br/>5</p></th>
  <th><p><br/>6</p></th>
  <th><p><br/>7</p></th>
  <th><p><br/>8</p></th>
  <th><p><br/>9</p></th>
  <th><p>2<br/>0</p></th>
  <th><p><br/>1</p></th>
  <th><p><br/>2</p></th>
  <th><p><br/>3</p></th>
  <th><p><br/>4</p></th>
  <th><p><br/>5</p></th>
  <th><p><br/>6</p></th>
  <th><p><br/>7</p></th>
  <th><p><br/>8</p></th>
  <th><p><br/>9</p></th>
  <th><p>3<br/>0</p></th>
  <th><p><br/>1</p></th>
 </tr>
 <tr>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>A</td>
 </tr>
</tbody></table>
</dd>
<dd>
<p>Where the bits are defined as:</p>
</dd>
<dd>
<table><thead>
  <tr>
   <th>
   <p>Value</p>
   </th>
   <th>
   <p>Description</p>
   </th>
  </tr>
 </thead><tbody><tr>
  <td>A</td>
  <td>All of the specified privileges MUST be held by the process that is requesting access.</td>
 </tr></tbody></table>
</dd>
<dd>
<p>All other bits MUST be set to zero and MUST be
ignored on receipt.</p>
</dd></dl><p><b>PrivilegeAttributes:</b> Pointer to an array of
unsigned 32-bit values that contain a set of bit flags describing each
privilege&#39;s attributes. An attribute is TRUE (or set) if its value is equal to
1. The value is constructed from zero or more bit flags from the following
table.</p><dl>
<dd>
<table>
 <tbody><tr>
  <th><p><br/>0</p></th>
  <th><p><br/>1</p></th>
  <th><p><br/>2</p></th>
  <th><p><br/>3</p></th>
  <th><p><br/>4</p></th>
  <th><p><br/>5</p></th>
  <th><p><br/>6</p></th>
  <th><p><br/>7</p></th>
  <th><p><br/>8</p></th>
  <th><p><br/>9</p></th>
  <th><p>1<br/>0</p></th>
  <th><p><br/>1</p></th>
  <th><p><br/>2</p></th>
  <th><p><br/>3</p></th>
  <th><p><br/>4</p></th>
  <th><p><br/>5</p></th>
  <th><p><br/>6</p></th>
  <th><p><br/>7</p></th>
  <th><p><br/>8</p></th>
  <th><p><br/>9</p></th>
  <th><p>2<br/>0</p></th>
  <th><p><br/>1</p></th>
  <th><p><br/>2</p></th>
  <th><p><br/>3</p></th>
  <th><p><br/>4</p></th>
  <th><p><br/>5</p></th>
  <th><p><br/>6</p></th>
  <th><p><br/>7</p></th>
  <th><p><br/>8</p></th>
  <th><p><br/>9</p></th>
  <th><p>3<br/>0</p></th>
  <th><p><br/>1</p></th>
 </tr>
 <tr>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>0</td>
  <td>B</td>
  <td>A</td>
 </tr>
</tbody></table>
</dd>
<dd>
<p>Where the bits are defined as:</p>
</dd>
<dd>
<table><thead>
  <tr>
   <th>
   <p>Value</p>
   </th>
   <th>
   <p>Description</p>
   </th>
  </tr>
 </thead><tbody><tr>
  <td>A</td>
  <td>Privilege is enabled by default.</td>
 </tr><tr>
  <td>B</td>
  <td>Privilege is enabled.</td>
 </tr></tbody></table>
</dd>
<dd>
<p>All other bits MUST be set to zero and MUST be
ignored on receipt.</p>
</dd></dl><p><b>PrivilegeNames:</b> A pointer to an array of
privilege names represented as <b>UNICODE_STRING</b> structures. The names of
the privileges are implementation specific.</p><p><b>QuotaLimits:</b> An <b>NLPR_QUOTA_LIMITS</b>
structure (section <span><a href="55d7ea86-c4cc-4a5e-8414-426673cb77d1" data-linktype="relative-path">2.2.1.5.2</a></span>) that
describes the account&#39;s current quota settings.</p><p><b>SystemAccessFlags:</b> A set of the following bit
flags that specify the ways in which the account is permitted to access the
system as detailed in POLICY_MODE_INTERACTIVE, POLICY_MODE_NETWORK, POLICY_MODE_BATCH,
POLICY_MODE_SERVICE, and POLICY_MODE_PROXY of <span><a href="../ms-lsad/1b5471ef-4c33-4a91-b079-dfcbb82f05cc" data-linktype="relative-path">[MS-LSAD]</a></span>.
See [MS-LSAD] for the specification of these bit values and allowed
combinations.</p><p><b>SecurityInformation:</b> A <b>SECURITY_INFORMATION</b>
structure, as specified in <span><a href="../ms-dtyp/cca27429-5689-4a16-b2b4-9325d93e4ba2" data-linktype="relative-path">[MS-DTYP]</a></span>
section <span><a href="../ms-dtyp/23e75ca3-98fd-4396-84e5-86cd9d40d343" data-linktype="relative-path">2.4.7</a></span>,
that specifies portions of a security descriptor about the <span><a href="b5e7d25a-40b2-41c8-9611-98f53358af66#gt_5ee032d0-d944-4acb-bbb5-b1cfc7df6db6" data-linktype="relative-path">trusted</a></span>
<span><a href="b5e7d25a-40b2-41c8-9611-98f53358af66#gt_b0276eb2-4e65-4cf1-a718-e0920a614aca" data-linktype="relative-path">domain</a></span>.</p><p><b>SecuritySize:</b> The size, in bytes, of the <b>SecurityDescriptor</b>
field.</p><p><b>SecurityDescriptor:</b> A pointer to a <b>SECURITY_DESCRIPTOR</b>
structure, as specified in [MS-DTYP] section <span><a href="../ms-dtyp/7d4dac05-9cef-4563-a058-f108abecce1d" data-linktype="relative-path">2.4.6</a></span>,
that describes the security settings for the account object.</p><p><b>DummyString1:</b> A <b>UNICODE_STRING</b>
structure, defined in section <span><a>2.2.1.1.3</a></span>, that
MUST contain 0 for the <b>Length</b> field, 0 for the <b>MaximumLength</b>
field, and NULL for the <b>Buffer</b> field. It is ignored upon receipt. The
Netlogon usage of dummy fields is defined in section <span><a href="bbc95890-215e-49a9-8bb8-92e723548046" data-linktype="relative-path">1.3.8.1.2</a></span>.</p><p><b>DummyString2:</b> See definition for <b>DummyString1</b>
field.</p><p><b>DummyString3:</b> See definition for <b>DummyString1</b>
field.</p><p><b>DummyString4:</b> See definition for <b>DummyString1</b>
field.</p><p><b>DummyLong1:</b> MUST be set to zero and MUST be
ignored on receipt. The Netlogon usage of dummy fields is defined in section
1.3.8.1.2.</p><p><b>DummyLong2:</b> See definition for <b>DummyLong1</b>
field.</p><p><b>DummyLong3:</b> See definition for <b>DummyLong1</b>
field.</p><p><b>DummyLong4:</b> See definition for <b>DummyLong1</b>
field.</p></div>