Share via

3.1.4.2.20 Receiving an EfsRpcQueryProtectors (Opnum 22)

  • Article

 

The EfsRpcQueryProtectors method is used by the client to query the metadata of an encrypted object for protectors that are either RMS or DPAPI-NG and whose associated private keys can be used to decrypt the object.<64>

 DWORD EfsRpcQueryProtectors(
   [in] handle_t binding_h,
   [in, string] wchar_t* FileName,
   [out] PENCRYPTION_PROTECTOR_LIST **ppProtectorList 
 );

binding_h: This is an RPC binding handle parameter, as specified in [C706] and [MS-RPCE] section 2.

FileName: An EFSRPC identifier, as specified in section 2.2.1.           

ppProtectorList: A pointer to a list of ENCRYPTION_PROTECTOR structures as specified in section 2.2.19.

Return Values: The server MUST return a nonzero value.