<div class="content"><p align="right"><a href="https://msdn.microsoft.com/en-us/library/7f60a1a7-99d8-49ba-91c0-6e027237b009" data-linktype="external">msdn link</a></p><p>The <b>NETLOGON_DELTA_ACCOUNTS</b> structure contains the
settings and <a href="b5e7d25a-40b2-41c8-9611-98f53358af66#gt_d8092e10-b227-4b44-b015-511bb8178940" data-linktype="relative-path">privileges</a>
for a <a href="b5e7d25a-40b2-41c8-9611-98f53358af66#gt_9e5f2104-d6df-4ae7-8a5c-6bd14a0da8fa" data-linktype="relative-path">Local Security
Authority (LSA)</a> account. This structure is used for replicating the LSA
account data from the <a href="b5e7d25a-40b2-41c8-9611-98f53358af66#gt_663cb13a-8b75-477f-b6e1-bea8f2fba64d" data-linktype="relative-path">primary
domain controller (PDC)</a> to a <a href="b5e7d25a-40b2-41c8-9611-98f53358af66#gt_ce1138c6-7ab4-4c37-98b4-95599071c3c3" data-linktype="relative-path">backup domain controller (BDC)</a>.</p><dl>
<dd>
<div><pre> typedef struct _NETLOGON_DELTA_ACCOUNTS {
   ULONG PrivilegeEntries;
   ULONG PrivilegeControl;
   [size_is(PrivilegeEntries)] ULONG* PrivilegeAttributes;
   [size_is(PrivilegeEntries)] PRPC_UNICODE_STRING PrivilegeNames;
   NLPR_QUOTA_LIMITS QuotaLimits;
   ULONG SystemAccessFlags;
   SECURITY_INFORMATION SecurityInformation;
   ULONG SecuritySize;
   [size_is(SecuritySize)] UCHAR* SecurityDescriptor;
   RPC_UNICODE_STRING DummyString1;
   RPC_UNICODE_STRING DummyString2;
   RPC_UNICODE_STRING DummyString3;
   RPC_UNICODE_STRING DummyString4;
   ULONG DummyLong1;
   ULONG DummyLong2;
   ULONG DummyLong3;
   ULONG DummyLong4;
 } NETLOGON_DELTA_ACCOUNTS,
  *PNETLOGON_DELTA_ACCOUNTS;
</pre></div>
</dd></dl><p><b>PrivilegeEntries:</b> The number of privileges
associated with the LSA account.</p><p><b>PrivilegeControl:</b> A bit flag describing the
properties of the account privileges. A flag is TRUE (or set) if its value is
equal to 1. The <b>PrivilegeControl</b> value is as follows.</p><dl>
<dd>
<table>
 <tbody><tr>
  <th><p><br/>0</p></th>
  <th><p><br/>1</p></th>
  <th><p><br/>2</p></th>
  <th><p><br/>3</p></th>
  <th><p><br/>4</p></th>
  <th><p><br/>5</p></th>
  <th><p><br/>6</p></th>
  <th><p><br/>7</p></th>
  <th><p><br/>8</p></th>
  <th><p><br/>9</p></th>
  <th><p>1<br/>0</p></th>
  <th><p><br/>1</p></th>
  <th><p><br/>2</p></th>
  <th><p><br/>3</p></th>
  <th><p><br/>4</p></th>
  <th><p><br/>5</p></th>
  <th><p><br/>6</p></th>
  <th><p><br/>7</p></th>
  <th><p><br/>8</p></th>
  <th><p><br/>9</p></th>
  <th><p>2<br/>0</p></th>
  <th><p><br/>1</p></th>
  <th><p><br/>2</p></th>
  <th><p><br/>3</p></th>
  <th><p><br/>4</p></th>
  <th><p><br/>5</p></th>
  <th><p><br/>6</p></th>
  <th><p><br/>7</p></th>
  <th><p><br/>8</p></th>
  <th><p><br/>9</p></th>
  <th><p>3<br/>0</p></th>
  <th><p><br/>1</p></th>
 </tr>
 <tr>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>A</p>
  </td>
 </tr>
</tbody></table>
</dd>
<dd>
<p>Where the bits are defined as:</p>
</dd>
<dd>
<table><thead>
  <tr>
   <th>
   <p>Value</p>
   </th>
   <th>
   <p>Description</p>
   </th>
  </tr>
 </thead><tbody><tr>
  <td>
  <p>A</p>
  </td>
  <td>
  <p>All of the specified privileges MUST be held by the
  process that is requesting access.</p>
  </td>
 </tr></tbody></table>
</dd>
<dd>
<p>All other bits MUST be set to zero and MUST be
ignored on receipt.</p>
</dd></dl><p><b>PrivilegeAttributes:</b> Pointer to an array of
unsigned 32-bit values that contain a set of bit flags describing each
privilege&#39;s attributes. An attribute is TRUE (or set) if its value is equal to
1. The value is constructed from zero or more bit flags from the following
table.</p><dl>
<dd>
<table>
 <tbody><tr>
  <th><p><br/>0</p></th>
  <th><p><br/>1</p></th>
  <th><p><br/>2</p></th>
  <th><p><br/>3</p></th>
  <th><p><br/>4</p></th>
  <th><p><br/>5</p></th>
  <th><p><br/>6</p></th>
  <th><p><br/>7</p></th>
  <th><p><br/>8</p></th>
  <th><p><br/>9</p></th>
  <th><p>1<br/>0</p></th>
  <th><p><br/>1</p></th>
  <th><p><br/>2</p></th>
  <th><p><br/>3</p></th>
  <th><p><br/>4</p></th>
  <th><p><br/>5</p></th>
  <th><p><br/>6</p></th>
  <th><p><br/>7</p></th>
  <th><p><br/>8</p></th>
  <th><p><br/>9</p></th>
  <th><p>2<br/>0</p></th>
  <th><p><br/>1</p></th>
  <th><p><br/>2</p></th>
  <th><p><br/>3</p></th>
  <th><p><br/>4</p></th>
  <th><p><br/>5</p></th>
  <th><p><br/>6</p></th>
  <th><p><br/>7</p></th>
  <th><p><br/>8</p></th>
  <th><p><br/>9</p></th>
  <th><p>3<br/>0</p></th>
  <th><p><br/>1</p></th>
 </tr>
 <tr>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>B</p>
  </td>
  <td>
  <p>A</p>
  </td>
 </tr>
</tbody></table>
</dd>
<dd>
<p>Where the bits are defined as:</p>
</dd>
<dd>
<table><thead>
  <tr>
   <th>
   <p>Value</p>
   </th>
   <th>
   <p>Description</p>
   </th>
  </tr>
 </thead><tbody><tr>
  <td>
  <p>A</p>
  </td>
  <td>
  <p>Privilege is enabled by default.</p>
  </td>
 </tr><tr>
  <td>
  <p>B</p>
  </td>
  <td>
  <p>Privilege is enabled.</p>
  </td>
 </tr></tbody></table>
</dd>
<dd>
<p>All other bits MUST be set to zero and MUST be
ignored on receipt.</p>
</dd></dl><p><b>PrivilegeNames:</b> A pointer to an array of
privilege names represented as <b>RPC_UNICODE_STRING</b> structures. See <a href="../ms-dtyp/cca27429-5689-4a16-b2b4-9325d93e4ba2" data-linktype="relative-path">[MS-DTYP]</a>
section <a href="../ms-dtyp/94a16bb6-c610-4cb9-8db6-26f15f560061" data-linktype="relative-path">2.3.10</a>
for a specification of the <b>RPC_UNICODE_STRING</b> structure. The names of
the privileges are implementation specific.</p><p><b>QuotaLimits:</b> An <b>NLPR_QUOTA_LIMITS</b>
structure (section <a href="55d7ea86-c4cc-4a5e-8414-426673cb77d1" data-linktype="relative-path">2.2.1.5.2</a>)
that describes the account&#39;s current quota settings.</p><p><b>SystemAccessFlags:</b> A set of the following bit
flags that specify the ways in which the account is permitted to access the
system as detailed in POLICY_MODE_INTERACTIVE, POLICY_MODE_NETWORK,
POLICY_MODE_BATCH, POLICY_MODE_SERVICE, and POLICY_MODE_PROXY of <a href="../ms-lsad/1b5471ef-4c33-4a91-b079-dfcbb82f05cc" data-linktype="relative-path">[MS-LSAD]</a>.
See [MS-LSAD] for the specification of these bit values and allowed
combinations.</p><p><b>SecurityInformation:</b> A <b>SECURITY_INFORMATION</b>
structure, as specified in [MS-DTYP] section <a href="../ms-dtyp/23e75ca3-98fd-4396-84e5-86cd9d40d343" data-linktype="relative-path">2.4.7</a>,
that specifies portions of a security descriptor about the <a href="b5e7d25a-40b2-41c8-9611-98f53358af66#gt_5ee032d0-d944-4acb-bbb5-b1cfc7df6db6" data-linktype="relative-path">trusted</a> <a href="b5e7d25a-40b2-41c8-9611-98f53358af66#gt_b0276eb2-4e65-4cf1-a718-e0920a614aca" data-linktype="relative-path">domain</a>.</p><p><b>SecuritySize:</b> The size, in bytes, of the <b>SecurityDescriptor</b>
field.</p><p><b>SecurityDescriptor:</b> A pointer to a <b>SECURITY_DESCRIPTOR</b>
structure, as specified in [MS-DTYP] section <a href="../ms-dtyp/7d4dac05-9cef-4563-a058-f108abecce1d" data-linktype="relative-path">2.4.6</a>,
that describes the security settings for the account object.</p><p><b>DummyString1:</b> A <b>STRING</b> structure,
defined in section <a href="4a896c09-a39c-4878-94f0-9e4f8a419f32" data-linktype="relative-path">2.2.1.1.2</a>,
that MUST contain 0 for the <b>Length</b> field, 0 for the <b>MaximumLength</b>
field, and NULL for the <b>Buffer</b> field. It is ignored upon receipt. The
Netlogon usage of dummy fields is described in section <a href="bbc95890-215e-49a9-8bb8-92e723548046" data-linktype="relative-path">1.3.8.1.2</a>.</p><p><b>DummyString2:</b> See definition for <b>DummyString1</b>
field.</p><p><b>DummyString3:</b> See definition for <b>DummyString1</b>
field.</p><p><b>DummyString4:</b> See definition for <b>DummyString1</b>
field.</p><p><b>DummyLong1:</b> MUST be set to zero and MUST be
ignored on receipt. The Netlogon usage of dummy fields is described in section
1.3.8.1.2.</p><p><b>DummyLong2:</b> See definition for <b>DummyLong1</b>
field.</p><p><b>DummyLong3:</b> See definition for <b>DummyLong1</b>
field.</p><p><b>DummyLong4:</b> See definition for <b>DummyLong1</b>
field.</p></div>