C# Signature:

[DllImport("advapi32.dll", SetLastError=true)]
static extern IntPtr LsaEnumerateAccountRights(
    IntPtr PolicyHandle,
    IntPtr AccountSid, // TODO
    out LSA_UNICODE_STRING[] UserRights,
    out ulong CountOfRights

);

// NTSTATUS LsaEnumerateAccountRights(

// LSA_HANDLE PolicyHandle,

// PSID AccountSid,

// PLSA_UNICODE_STRING* UserRights,

// PULONG CountOfRights

//);

VB Signature:

Declare Function LsaEnumerateAccountRights Lib "advapi32.dll" (TODO) As TODO

User-Defined Types:

None.

Notes:

Just making a start. I'll be back soon when I've researched how to deal with NTSTATUS codes. Got to go dig in some header files.

Right - got it - NTSTATUS is a long, so I guess an IntPtr - I guess the place to document this is LsaNtStatusToWinError

...or - do you only use an IntPtr for an opaque handle?

Meanwhile - LSA_HANDLE is a PVOID - that makes sense for an opaque handle, so I guess I'll use an IntPtr again. Not completely confident about this though.

UserRights should be a pointer to an array of LSA_UNICODE_STRING structs. Still have to figure out exactly how this goes.

Now I see everyone else is using byte[] for SIDs. Must be a reason. Another todo.

Still a work in progress!!

Tips & Tricks:

Please add some!

Sample Code:

Please add some!

Alternative Managed API:

Do you know one? Please contribute it!

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/security/security/lsaenumerateaccountrights.asp

Please edit this page!

Do you have...

• helpful tips or sample code to share for using this API in managed code?
• corrections to the existing content?
• variations of the signature you want to share?
• additional languages you want to include?

Select "Edit This Page" on the right hand toolbar and edit it! Or add new pages containing supporting types needed for this API (structures, delegates, and more).