Module: Windows::Security

Included in:
File
Defined in:
lib/windows/security.rb,
lib/windows/security/authentication.rb

Defined Under Namespace

Modules: Authentication

Constant Summary collapse

ACL_REVISION = 
2
ACL_REVISION1 = 
1
ACL_REVISION2 = 
2
ACL_REVISION3 = 
3
ACL_REVISION4 = 
4
ALLOW_ACE_LENGTH = 
62
DACL_SECURITY_INFORMATION = 
4
SE_DACL_PRESENT = 
4
SECURITY_DESCRIPTOR_MIN_LENGTH = 
20
SECURITY_DESCRIPTOR_REVISION = 
1
SECURITY_DESCRIPTOR_REVISION1 = 
1
SECURITY_NULL_SID_AUTHORITY = 
0
SECURITY_WORLD_SID_AUTHORITY = 
1
SECURITY_LOCAL_SID_AUTHORITY = 
2
SECURITY_CREATOR_SID_AUTHORITY = 
3
SECURITY_NON_UNIQUE_AUTHORITY = 
4
SECURITY_NT_AUTHORITY = 
5
SECURITY_RESOURCE_MANAGER_AUTHORITY = 
9
SECURITY_NULL_RID = 
0x00000000
SECURITY_WORLD_RID = 
0x00000000
SECURITY_LOCAL_RID = 
0x00000000
SECURITY_CREATOR_OWNER_RID = 
0x00000000
SECURITY_CREATOR_GROUP_RID = 
0x00000001
SECURITY_CREATOR_OWNER_SERVER_RID = 
0x00000002
SECURITY_CREATOR_GROUP_SERVER_RID = 
0x00000003
SECURITY_DIALUP_RID = 
0x00000001
SECURITY_NETWORK_RID = 
0x00000002
SECURITY_BATCH_RID = 
0x00000003
SECURITY_INTERACTIVE_RID = 
0x00000004
SECURITY_LOGON_IDS_RID = 
0x00000005
SECURITY_LOGON_IDS_RID_COUNT = 
3
SECURITY_SERVICE_RID = 
0x00000006
SECURITY_ANONYMOUS_LOGON_RID = 
0x00000007
SECURITY_PROXY_RID = 
0x00000008
SECURITY_ENTERPRISE_CONTROLLERS_RID = 
0x00000009
SECURITY_SERVER_LOGON_RID = 
SECURITY_ENTERPRISE_CONTROLLERS_RID
SECURITY_PRINCIPAL_SELF_RID = 
0x0000000A
SECURITY_AUTHENTICATED_USER_RID = 
0x0000000B
SECURITY_RESTRICTED_CODE_RID = 
0x0000000C
SECURITY_TERMINAL_SERVER_RID = 
0x0000000D
SECURITY_REMOTE_LOGON_RID = 
0x0000000E
SECURITY_THIS_ORGANIZATION_RID = 
0x0000000F
SECURITY_LOCAL_SYSTEM_RID = 
0x00000012
SECURITY_LOCAL_SERVICE_RID = 
0x00000013
SECURITY_NETWORK_SERVICE_RID = 
0x00000014
SECURITY_NT_NON_UNIQUE = 
0x00000015
SECURITY_NT_NON_UNIQUE_SUB_AUTH_COUNT = 
3
SECURITY_BUILTIN_DOMAIN_RID = 
0x00000020
SECURITY_PACKAGE_BASE_RID = 
0x00000040
SECURITY_PACKAGE_RID_COUNT = 
2
SECURITY_PACKAGE_NTLM_RID = 
0x0000000A
SECURITY_PACKAGE_SCHANNEL_RID = 
0x0000000E
SECURITY_PACKAGE_DIGEST_RID = 
0x00000015
SECURITY_MAX_ALWAYS_FILTERED = 
0x000003E7
SECURITY_MIN_NEVER_FILTERED = 
0x000003E8
SECURITY_OTHER_ORGANIZATION_RID = 
0x000003E8
FOREST_USER_RID_MAX = 
0x000001F3
DOMAIN_USER_RID_ADMIN = 
0x000001F4
DOMAIN_USER_RID_GUEST = 
0x000001F5
DOMAIN_USER_RID_KRBTGT = 
0x000001F6
DOMAIN_USER_RID_MAX = 
0x000003E7
DOMAIN_GROUP_RID_ADMINS = 
0x00000200
DOMAIN_GROUP_RID_USERS = 
0x00000201
DOMAIN_GROUP_RID_GUESTS = 
0x00000202
DOMAIN_GROUP_RID_COMPUTERS = 
0x00000203
DOMAIN_GROUP_RID_CONTROLLERS = 
0x00000204
DOMAIN_GROUP_RID_CERT_ADMINS = 
0x00000205
DOMAIN_GROUP_RID_SCHEMA_ADMINS = 
0x00000206
DOMAIN_GROUP_RID_ENTERPRISE_ADMINS = 
0x00000207
DOMAIN_GROUP_RID_POLICY_ADMINS = 
0x00000208
DOMAIN_ALIAS_RID_ADMINS = 
0x00000220
DOMAIN_ALIAS_RID_USERS = 
0x00000221
DOMAIN_ALIAS_RID_GUESTS = 
0x00000222
DOMAIN_ALIAS_RID_POWER_USERS = 
0x00000223
DOMAIN_ALIAS_RID_ACCOUNT_OPS = 
0x00000224
DOMAIN_ALIAS_RID_SYSTEM_OPS = 
0x00000225
DOMAIN_ALIAS_RID_PRINT_OPS = 
0x00000226
DOMAIN_ALIAS_RID_BACKUP_OPS = 
0x00000227
DOMAIN_ALIAS_RID_REPLICATOR = 
0x00000228
DOMAIN_ALIAS_RID_RAS_SERVERS = 
0x00000229
DOMAIN_ALIAS_RID_PREW2KCOMPACCESS = 
0x0000022A
DOMAIN_ALIAS_RID_REMOTE_DESKTOP_USERS = 
0x0000022B
DOMAIN_ALIAS_RID_NETWORK_CONFIGURATION_OPS = 
0x0000022C
DOMAIN_ALIAS_RID_INCOMING_FOREST_TRUST_BUILDERS = 
0x0000022D
DOMAIN_ALIAS_RID_MONITORING_USERS = 
0x0000022E
DOMAIN_ALIAS_RID_LOGGING_USERS = 
0x0000022F
DOMAIN_ALIAS_RID_AUTHORIZATIONACCESS = 
0x00000230
DOMAIN_ALIAS_RID_TS_LICENSE_SERVERS = 
0x00000231
DOMAIN_ALIAS_RID_DCOM_USERS = 
0x00000232
GENERIC_RIGHTS_MASK = 
0xF0010000
GENERIC_RIGHTS_CHK = 
0xF0000000
REST_RIGHTS_MASK = 
0x001FFFFF
TOKEN_READ = 
131080
TOKEN_WRITE = 
131296
TOKEN_EXECUTE = 
131072
TOKEN_ASSIGN_PRIMARY = 
0x0001
TOKEN_DUPLICATE = 
0x0002
TOKEN_IMPERSONATE = 
0x0004
TOKEN_QUERY = 
0x0008
TOKEN_QUERY_SOURCE = 
0x0010
TOKEN_ADJUST_PRIVILEGES = 
0x0020
TOKEN_ADJUST_GROUPS = 
0x0040
TOKEN_ADJUST_DEFAULT = 
0x0080
TOKEN_ADJUST_SESSIONID = 
0x0100
TOKEN_ALL_ACCESS_P =

Calculated from WinNt.h

983295
TOKEN_ALL_ACCESS = 
TOKEN_ALL_ACCESS_P | TOKEN_ADJUST_SESSIONID
SE_PRIVILEGE_ENABLED_BY_DEFAULT = 
0x00000001
SE_PRIVILEGE_ENABLED = 
0x00000002
SE_PRIVILEGE_REMOVED = 
0X00000004
SE_PRIVILEGE_USED_FOR_ACCESS = 
0x80000000
OWNER_SECURITY_INFORMATION = 
1
GROUP_SECURITY_INFORMATION = 
2
SE_UNKNOWN_OBJECT_TYPE =

SE_OBJECT_TYPE Enumeration

0
SE_FILE_OBJECT = 
1
SE_SERVICE = 
2
SE_PRINTER = 
3
SE_REGISTRY_KEY = 
4
SE_LMSHARE = 
5
SE_KERNEL_OBJECT = 
6
SE_WINDOW_OBJECT = 
7
SE_DS_OBJECT = 
8
SE_DS_OBJECT_ALL = 
9
SE_PROVIDER_DEFINED_OBJECT = 
10
SE_WMIGUID_OBJECT = 
11
SE_REGISTRY_WOW64_32KEY = 
12
SE_CREATE_TOKEN_NAME =

Defined Privileges

"SeCreateTokenPrivilege"
SE_ASSIGNPRIMARYTOKEN_NAME = 
"SeAssignPrimaryTokenPrivilege"
SE_LOCK_MEMORY_NAME = 
"SeLockMemoryPrivilege"
SE_INCREASE_QUOTA_NAME = 
"SeIncreaseQuotaPrivilege"
SE_UNSOLICITED_INPUT_NAME = 
"SeUnsolicitedInputPrivilege"
SE_MACHINE_ACCOUNT_NAME = 
"SeMachineAccountPrivilege"
SE_TCB_NAME = 
"SeTcbPrivilege"
SE_SECURITY_NAME = 
"SeSecurityPrivilege"
SE_TAKE_OWNERSHIP_NAME = 
"SeTakeOwnershipPrivilege"
SE_LOAD_DRIVER_NAME = 
"SeLoadDriverPrivilege"
SE_SYSTEM_PROFILE_NAME = 
"SeSystemProfilePrivilege"
SE_SYSTEMTIME_NAME = 
"SeSystemtimePrivilege"
SE_PROF_SINGLE_PROCESS_NAME = 
"SeProfileSingleProcessPrivilege"
SE_INC_BASE_PRIORITY_NAME = 
"SeIncreaseBasePriorityPrivilege"
SE_CREATE_PAGEFILE_NAME = 
"SeCreatePagefilePrivilege"
SE_CREATE_PERMANENT_NAME = 
"SeCreatePermanentPrivilege"
SE_BACKUP_NAME = 
"SeBackupPrivilege"
SE_RESTORE_NAME = 
"SeRestorePrivilege"
SE_SHUTDOWN_NAME = 
"SeShutdownPrivilege"
SE_DEBUG_NAME = 
"SeDebugPrivilege"
SE_AUDIT_NAME = 
"SeAuditPrivilege"
SE_SYSTEM_ENVIRONMENT_NAME = 
"SeSystemEnvironmentPrivilege"
SE_CHANGE_NOTIFY_NAME = 
"SeChangeNotifyPrivilege"
SE_REMOTE_SHUTDOWN_NAME = 
"SeRemoteShutdownPrivilege"
SE_UNDOCK_NAME = 
"SeUndockPrivilege"
SE_SYNC_AGENT_NAME = 
"SeSyncAgentPrivilege"
SE_ENABLE_DELEGATION_NAME = 
"SeEnableDelegationPrivilege"
SE_MANAGE_VOLUME_NAME = 
"SeManageVolumePrivilege"
SE_IMPERSONATE_NAME = 
"SeImpersonatePrivilege"
SE_CREATE_GLOBAL_NAME = 
"SeCreateGlobalPrivilege"
ACCESS_MIN_MS_ACE_TYPE = 
0x0
ACCESS_ALLOWED_ACE_TYPE = 
0x0
ACCESS_DENIED_ACE_TYPE = 
0x1
SYSTEM_AUDIT_ACE_TYPE = 
0x2
SYSTEM_ALARM_ACE_TYPE = 
0x3
ACCESS_MAX_MS_V2_ACE_TYPE = 
0x3
ACCESS_ALLOWED_COMPOUND_ACE_TYPE = 
0x4
ACCESS_MAX_MS_V3_ACE_TYPE = 
0x4
ACCESS_MIN_MS_OBJECT_ACE_TYPE = 
0x5
ACCESS_ALLOWED_OBJECT_ACE_TYPE = 
0x5
ACCESS_DENIED_OBJECT_ACE_TYPE = 
0x6
SYSTEM_AUDIT_OBJECT_ACE_TYPE = 
0x7
SYSTEM_ALARM_OBJECT_ACE_TYPE = 
0x8
ACCESS_MAX_MS_OBJECT_ACE_TYPE = 
0x8
ACCESS_MAX_MS_V4_ACE_TYPE = 
0x8
ACCESS_MAX_MS_ACE_TYPE = 
0x8
ACCESS_ALLOWED_CALLBACK_ACE_TYPE = 
0x9
ACCESS_DENIED_CALLBACK_ACE_TYPE = 
0xA
ACCESS_ALLOWED_CALLBACK_OBJECT_ACE_TYPE = 
0xB
ACCESS_DENIED_CALLBACK_OBJECT_ACE_TYPE = 
0xC
SYSTEM_AUDIT_CALLBACK_ACE_TYPE = 
0xD
SYSTEM_ALARM_CALLBACK_ACE_TYPE = 
0xE
SYSTEM_AUDIT_CALLBACK_OBJECT_ACE_TYPE = 
0xF
SYSTEM_ALARM_CALLBACK_OBJECT_ACE_TYPE = 
0x10
ACCESS_MAX_MS_V5_ACE_TYPE = 
0x10
OBJECT_INHERIT_ACE = 
0x1
CONTAINER_INHERIT_ACE = 
0x2
NO_PROPAGATE_INHERIT_ACE = 
0x4
INHERIT_ONLY_ACE = 
0x8
INHERITED_ACE = 
0x10
VALID_INHERIT_FLAGS = 
0x1F
SUCCESSFUL_ACCESS_ACE_FLAG = 
0x40
FAILED_ACCESS_ACE_FLAG = 
0x80
DELETE =

Standard Access Rights

0x00010000
READ_CONTROL = 
0x20000
WRITE_DAC = 
0x40000
WRITE_OWNER = 
0x80000
SYNCHRONIZE = 
0x100000
STANDARD_RIGHTS_REQUIRED = 
0xf0000
STANDARD_RIGHTS_READ = 
0x20000
STANDARD_RIGHTS_WRITE = 
0x20000
STANDARD_RIGHTS_EXECUTE = 
0x20000
STANDARD_RIGHTS_ALL = 
0x1F0000
SPECIFIC_RIGHTS_ALL = 
0xFFFF
ACCESS_SYSTEM_SECURITY = 
0x1000000
MAXIMUM_ALLOWED = 
0x2000000
GENERIC_READ = 
0x80000000
GENERIC_WRITE = 
0x40000000
GENERIC_EXECUTE = 
0x20000000
GENERIC_ALL = 
0x10000000
SidTypeUser =

Enum SidNameUse

1
SidTypeGroup = 
2
SidTypeDomain = 
3
SidTypeAlias = 
4
SidTypeWellKnownGroup = 
5
SidTypeDeletedAccount = 
6
SidTypeInvalid = 
7
SidTypeUnknown = 
8
SidTypeComputer = 
9
TokenUser =

Enum TokenInformationClass

1
TokenGroups = 
2
TokenPrivileges = 
3
TokenOwner = 
4
TokenPrimaryGroup = 
5
TokenDefaultDacl = 
6
TokenSource = 
7
TokenType = 
8
TokenImpersonationLevel = 
9
TokenStatistics = 
10
TokenRestrictedSids = 
11
TokenSessionId = 
12
TokenGroupsAndPrivileges = 
13
TokenSessionReference = 
14
TokenSandBoxInert = 
15
TokenAuditPolicy = 
16
TokenOrigin = 
17
TokenElevationType = 
18
TokenLinkedToken = 
19
TokenElevation = 
20
TokenHasRestrictions = 
21
TokenAccessInformation = 
22
TokenVirtualizationAllowed = 
23
TokenVirtualizationEnabled = 
24
TokenIntegrityLevel = 
25
TokenUIAccess = 
26
TokenMandatoryPolicy = 
27
TokenLogonSid = 
28
MaxTokenInfoClass = 
29
WinNullSid =

Enum WellKnownSidType

0
WinWorldSid = 
1
WinLocalSid = 
2
WinCreatorOwnerSid = 
3
WinCreatorGroupSid = 
4
WinCreatorOwnerServerSid = 
5
WinCreatorGroupServerSid = 
6
WinNtAuthoritySid = 
7
WinDialupSid = 
8
WinNetworkSid = 
9
WinBatchSid = 
10
WinInteractiveSid = 
11
WinServiceSid = 
12
WinAnonymousSid = 
13
WinProxySid = 
14
WinEnterpriseControllersSid = 
15
WinSelfSid = 
16
WinAuthenticatedUserSid = 
17
WinRestrictedCodeSid = 
18
WinTerminalServerSid = 
19
WinRemoteLogonIdSid = 
20
WinLogonIdsSid = 
21
WinLocalSystemSid = 
22
WinLocalServiceSid = 
23
WinNetworkServiceSid = 
24
WinBuiltinDomainSid = 
25
WinBuiltinAdministratorsSid = 
26
WinBuiltinUsersSid = 
27
WinBuiltinGuestsSid = 
28
WinBuiltinPowerUsersSid = 
29
WinBuiltinAccountOperatorsSid = 
30
WinBuiltinSystemOperatorsSid = 
31
WinBuiltinPrintOperatorsSid = 
32
WinBuiltinBackupOperatorsSid = 
33
WinBuiltinReplicatorSid = 
34
WinBuiltinPreWindows2000CompatibleAccessSid = 
35
WinBuiltinRemoteDesktopUsersSid = 
36
WinBuiltinNetworkConfigurationOperatorsSid = 
37
WinAccountAdministratorSid = 
38
WinAccountGuestSid = 
39
WinAccountKrbtgtSid = 
40
WinAccountDomainAdminsSid = 
41
WinAccountDomainUsersSid = 
42
WinAccountDomainGuestsSid = 
43
WinAccountComputersSid = 
44
WinAccountControllersSid = 
45
WinAccountCertAdminsSid = 
46
WinAccountSchemaAdminsSid = 
47
WinAccountEnterpriseAdminsSid = 
48
WinAccountPolicyAdminsSid = 
49
WinAccountRasAndIasServersSid = 
50
WinNTLMAuthenticationSid = 
51
WinDigestAuthenticationSid = 
52
WinSChannelAuthenticationSid = 
53
WinThisOrganizationSid = 
54
WinOtherOrganizationSid = 
55
WinBuiltinIncomingForestTrustBuildersSid = 
56
WinBuiltinPerfMonitoringUsersSid = 
57
WinBuiltinPerfLoggingUsersSid = 
58
WinBuiltinAuthorizationAccessSid = 
59
WinBuiltinTerminalServerLicenseServersSid = 
60
WinBuiltinDCOMUsersSid = 
61
WinBuiltinIUsersSid = 
62
WinIUserSid = 
63
WinBuiltinCryptoOperatorsSid = 
64
WinUntrustedLabelSid = 
65
WinLowLabelSid = 
66
WinMediumLabelSid = 
67
WinHighLabelSid = 
68
WinSystemLabelSid = 
69
WinWriteRestrictedCodeSid = 
70
WinCreatorOwnerRightsSid = 
71
WinCacheablePrincipalsGroupSid = 
72
WinNonCacheablePrincipalsGroupSid = 
73
WinEnterpriseReadonlyControllersSid = 
74
WinAccountReadonlyControllersSid = 
75
WinBuiltinEventLogReadersGroup = 
76
WinNewEnterpriseReadonlyControllersSid = 
77
WinBuiltinCertSvcDComAccessGroup = 
78
AclRevisionInformation =

Enum AclInformationClass

1
AclSizeInformation = 
2