Share via

2.2.10 ACCESS_MASK

  • Article

The ACCESS_MASK data type is a bitmask that defines the access rights to grant an object. Access types are reconciled with the discretionary access control list (DACL) of the object to determine whether the requested access is granted or denied.

This type is declared as follows:

 typedef unsigned long ACCESS_MASK;

The possible values are defined in [MS-LSAD] sections 2.2.1.1.1 and 2.2.1.1.2. The ACCESS_MASK data type is further defined in [MS-DTYP] section 2.4.3.

For this protocol, only a subset of the possible values is required. This subset consists of POLICY_LOOKUP_NAMES, which is defined in the following table.

Value

Meaning

POLICY_LOOKUP_NAMES

0x00000800

Access to translate names and SIDs.