<div class="content"><p align="right"><a href="https://msdn.microsoft.com/en-us/library/5454e6c6-f786-4327-8667-d542b5ebb7c7" data-linktype="external">msdn link</a></p><p>The <b>NETLOGON_SID_AND_ATTRIBUTES</b> structure contains a <a href="b5e7d25a-40b2-41c8-9611-98f53358af66#gt_83f2020d-0804-4840-a5ac-e06439d50f8d" data-linktype="relative-path">security identifier (SID)</a>
and its attributes.</p><dl>
<dd>
<div><pre> typedef struct _NETLOGON_SID_AND_ATTRIBUTES {
   PRPC_SID Sid;
   ULONG Attributes;
 } NETLOGON_SID_AND_ATTRIBUTES,
  *PNETLOGON_SID_AND_ATTRIBUTES;
</pre></div>
</dd></dl><p><b>Sid:</b> A pointer to a security identifier (SID),
as specified in <a href="../ms-dtyp/cca27429-5689-4a16-b2b4-9325d93e4ba2" data-linktype="relative-path">[MS-DTYP]</a>
section <a href="../ms-dtyp/5cb97814-a1c2-4215-b7dc-76d1f4bfad01" data-linktype="relative-path">2.4.2.3</a>.</p><p><b>Attributes:</b> A set of bit flags that contains
the set of security attributes assigned to this SID. A bit is TRUE (or set) if
its value is equal to 1.  The value is constructed from one or more bit flags
from the following table.</p><dl>
<dd>
<table>
 <tbody><tr>
  <th><p><br/>0</p></th>
  <th><p><br/>1</p></th>
  <th><p><br/>2</p></th>
  <th><p><br/>3</p></th>
  <th><p><br/>4</p></th>
  <th><p><br/>5</p></th>
  <th><p><br/>6</p></th>
  <th><p><br/>7</p></th>
  <th><p><br/>8</p></th>
  <th><p><br/>9</p></th>
  <th><p>1<br/>0</p></th>
  <th><p><br/>1</p></th>
  <th><p><br/>2</p></th>
  <th><p><br/>3</p></th>
  <th><p><br/>4</p></th>
  <th><p><br/>5</p></th>
  <th><p><br/>6</p></th>
  <th><p><br/>7</p></th>
  <th><p><br/>8</p></th>
  <th><p><br/>9</p></th>
  <th><p>2<br/>0</p></th>
  <th><p><br/>1</p></th>
  <th><p><br/>2</p></th>
  <th><p><br/>3</p></th>
  <th><p><br/>4</p></th>
  <th><p><br/>5</p></th>
  <th><p><br/>6</p></th>
  <th><p><br/>7</p></th>
  <th><p><br/>8</p></th>
  <th><p><br/>9</p></th>
  <th><p>3<br/>0</p></th>
  <th><p><br/>1</p></th>
 </tr>
 <tr>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>D</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>C</p>
  </td>
  <td>
  <p>B</p>
  </td>
  <td>
  <p>A</p>
  </td>
 </tr>
</tbody></table>
</dd>
<dd>
<p>Where the bits are defined as:</p>
</dd>
<dd>
<table><thead>
  <tr>
   <th>
   <p>Value</p>
   </th>
   <th>
   <p>Description</p>
   </th>
  </tr>
 </thead><tbody><tr>
  <td>
  <p>A</p>
  </td>
  <td>
  <p>The SID cannot have the <b>SE_GROUP_ENABLED</b>
  attribute removed.  Corresponds to the SID attribute <b>SE_GROUP_MANDATORY</b>.
  This attribute prevents the user from disabling the <a href="b5e7d25a-40b2-41c8-9611-98f53358af66#gt_51c51c14-7f9d-4c0b-a69c-d3e059bfffac" data-linktype="relative-path">group</a>. Disabling a group
  causes the group to be ignored by access validation routines. </p>
  </td>
 </tr><tr>
  <td>
  <p>B</p>
  </td>
  <td>
  <p>The SID is enabled by default (as opposed to being
  enabled by an application). Corresponds to the SID attribute <b>SE_GROUP_ENABLED_BY_DEFAULT</b>. 
  </p>
  </td>
 </tr><tr>
  <td>
  <p>C</p>
  </td>
  <td>
  <p>The SID is enabled for access checks.  Corresponds to
  the SID attribute <b>SE_GROUP_ENABLED</b>. </p>
  </td>
 </tr><tr>
  <td>
  <p>D</p>
  </td>
  <td>
  <p>This group is a <a href="b5e7d25a-40b2-41c8-9611-98f53358af66#gt_32226492-3c8c-4a99-a0d1-f27aaeec3c97" data-linktype="relative-path">domain local group</a>. 
  Corresponds to <b>SE_GROUP_RESOURCE</b>. </p>
  </td>
 </tr></tbody></table>
</dd>
<dd>
<p>All other bits MUST be set to zero and MUST be
ignored on receipt. For more information, see <a href="https://go.microsoft.com/fwlink/?linkid=2101788" data-linktype="external">[MSDOCS-TokenGrp]</a>.</p>
</dd></dl><p>These values are opaque to the Netlogon protocol. They are
not used or processed directly. All fields of this structure have the same
meaning as the identically named fields in the <b>KERB_SID_AND_ATTRIBUTES</b>
structure as specified in <a href="../ms-pac/166d8064-c863-41e1-9c23-edaaa5f36962" data-linktype="relative-path">[MS-PAC]</a>
section <a href="../ms-pac/311aab27-ebdf-47f7-b939-13dc99b15341" data-linktype="relative-path">2.2.1</a>.</p></div>