The LsaEnumerateAccountsWithUserRight function returns the accounts in the database of a Local Security Authority (LSA) Policy object that hold a specified privilege.

static extern uint LsaEnumerateAccountsWithUserRight(

Declare Function LsaEnumerateAccountsWithUserRight Lib "advapi32.dll" ( _

'NTSTATUS LsaEnumerateAccountsWithUserRight(

internal static extern uint LsaEnumerateAccountsWithUserRight(

uint ret = Win32Sec.LsaEnumerateAccountsWithUserRight(lsaHandle, privileges, out buffer, out count);

' Setup the input parameters for the LsaEnumerateAccountsWithUserRight API

ret = LsaEnumerateAccountsWithUserRight(Policy, DenyTSRights, EnumBuf, count)

Documentation

[LsaEnumerateAccountsWithUserRight] on MSDN

2: LsaLookupSids

internal static extern uint LsaEnumerateAccountsWithUserRight(

Win32Sec.LsaEnumerateAccountsWithUserRight(lsaHandle, privileges, out buffer, out count);

3: LsaOpenPolicy

' Setup the input parameters for the LsaEnumerateAccountsWithUserRight API

ret = LsaEnumerateAccountsWithUserRight(Policy, DenyTSRights, EnumBuf, count)

Structures

4: LSA_ENUMERATION_INFORMATION

Summary

The LSA_ENUMERATION_INFORMATION structure is used with the LsaEnumerateAccountsWithUserRight function to return a pointer to a SID.

Access PInvoke.net directly from VS: