C# Signature:

[DllImport("advapi32.dll", SetLastError=true)]
static extern IntPtr LsaEnumerateAccountRights(
    IntPtr PolicyHandle,
    IntPtr AccountSid,
    string UserRights, //?
    ref ulong CountOfRights //?

);

// NTSTATUS LsaEnumerateAccountRights(

// LSA_HANDLE PolicyHandle,

// PSID AccountSid,

// PLSA_UNICODE_STRING* UserRights,

// PULONG CountOfRights

//);

VB Signature:

Declare Function LsaEnumerateAccountRights Lib "advapi32.dll" (TODO) As TODO

User-Defined Types:

None.

Notes:

Just making a start. I'll be back soon when I've researched how to deal with NTSTATUS codes. Got to go dig in some header files.

Right - got it - NTSTATUS is a long, so I guess an IntPtr - I guess the place to document this is LsaNtStatusToWinError

Meanwhile - LSA_HANDLE is a PVOID - that makes sense for an opaque handle, so I guess I'll use an IntPtr again. Not completely confident about this though.

Still a work in progress!!

Tips & Tricks:

Please add some!

Sample Code:

Please add some!

Alternative Managed API:

Do you know one? Please contribute it!

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/security/security/lsaenumerateaccountrights.asp

Please edit this page!

Do you have...

• helpful tips or sample code to share for using this API in managed code?
• corrections to the existing content?
• variations of the signature you want to share?
• additional languages you want to include?

Select "Edit This Page" on the right hand toolbar and edit it! Or add new pages containing supporting types needed for this API (structures, delegates, and more).