2.2.1.3.13 NETLOGON_SECURE_CHANNEL_TYPE

  • Article

The NETLOGON_SECURE_CHANNEL_TYPE enumeration specifies the type of secure channel to use in a logon transaction.

 typedef  enum _NETLOGON_SECURE_CHANNEL_TYPE
 {
   NullSecureChannel = 0,
   MsvApSecureChannel = 1,
   WorkstationSecureChannel = 2,
   TrustedDnsDomainSecureChannel = 3,
   TrustedDomainSecureChannel = 4,
   UasServerSecureChannel = 5,
   ServerSecureChannel = 6,
   CdcServerSecureChannel = 7
 } NETLOGON_SECURE_CHANNEL_TYPE;

NullSecureChannel: An unauthenticated channel type. This value MUST NOT be used in the Netlogon RPC calls between a client and a remote server. The error code STATUS_INVALID_PARAMETER is returned.

MsvApSecureChannel: A secure channel between the local NT LAN Manager (NTLM) security provider and the Netlogon server. The client and the server are the same machine for this channel type. This value MUST NOT be used in the Netlogon RPC calls between a client and a remote server. The error code STATUS_INVALID_PARAMETER is returned.

WorkstationSecureChannel: A secure channel from a domain member to a DC.

TrustedDnsDomainSecureChannel: A secure channel between two DCs, connected through a trust relationship created between two Active Directory domains. A trusted domain object (TDO) is used in this type of channel.

TrustedDomainSecureChannel: A secure channel between two DCs, connected through a trust relationship created between two domains.<31>

UasServerSecureChannel: Secure channel from a LAN Manager server to a DC. This value is no longer supported, and it MUST NOT be used in the Netlogon RPC calls between a client and a remote server. The error code STATUS_INVALID_PARAMETER is returned.

ServerSecureChannel: A secure channel from a backup domain controller to a primary domain controller.

CdcServerSecureChannel: A secure channel from a read-only domain controller (RODC) to a domain controller.<32>