zilongwang/ReadingBank huggingface dataset:
STATUS_IO_TIMEOUT STATUS_NETLOGON_NOT_STARTED Not used in Windows NT 4.0 SP2. STATUS_NETWORK_BUSY STATUS_NETWORK_NAME_DELETED STATUS_NETWORK_UNREACHABLE Not used in Windows NT 4.0 SP2. STATUS_NO_SUCH_DEVICE STATUS_NO_SUCH_LOGON_SESSION Not used in Windows NT 4.0 SP2, Windows 2000, and Windows XP RTM. STATUS_REMOTE_NOT_LISTENING STATUS_REQUEST_NOT_ACCEPTED STATUS_SHARING_PAUSED Not used in Windows NT 4.0 SP2. STATUS_UNEXPECTED_NETWORK_ERROR STATUS_UNMAPPABLE_CHARACTER Not used in Windows NT 4.0 SP2. STATUS_USER_SESSION_DELETED Not used in Windows NT 4.0 SP2 and Windows 2000. STATUS_VIRTUAL_CIRCUIT_CLOSED <15> Section 3.1.5.4.3: This can happen when the server accessed has been consolidated using Microsoft File Server Migration Toolkit. For more information, see . The Windows client handles this response in the same way that it handles link referrals that it receives in response to link referral requests. <16> Section 3.1.5.4.3: Windows Server 2003 and Windows XP DFS clients fail the I/O operation if the ReferralCache entry refresh fails. Windows Vista, Windows Server 2008, Windows 7, Windows Server 2008 R2, Windows 8, Windows Server 2012, Windows 8.1, Windows Server 2012 R2, Windows 10, and Windows Server 2016 DFS clients use a soft time-out equal to the TTL and a hard time-out equal to 4*TTL. <17> Section 3.2: DFS server functionality is available only in the following Windows versions: Windows NT Server 4.0 operating system with Service Pack 2 (SP2) Windows 2000 Server Windows Server 2003 Windows Server 2008 Windows Server 2008 R2 Windows Server 2012 Windows Server 2012 R2 Windows Server 2016
Index A Abstract data model 24 51 root target server 45 44 44 44 12 C 13 75 Client 24 24 higher-layer triggered events 39 25 41 41 40 25 44 message processing 41 41 41 40 24 41 requirements ( 12, 12) sequencing rules 41 41 41 40 44 25 D Data model - abstract 24 51 root target server 45 44 44 44 58 24 44 19 20 21 21 22 22 Domain controller (DC) 51 51 51 56 message processing 52 51 55 54 50 requirements ( 12, 12) sequencing rules 52 51 55 54 56 51 58 57 60 59 61 E Events 44 50 44 50 Examples 58 57 60 59 61 64 64 F 13 G 6 H Higher-layer triggered events client 39 25 51 root target server 45 45 15
I 41 41 40 I/O operation to target failure 41 40 41 65 65 10 Initialization 25 51 45 45 Interfaces - client 24 Interfaces - server 44 6 L Local events 44 56 50 50 M Message processing client 41 41 41 40 DC 52 51 55 54 root target server 46 46 46 47 46 Messages syntax 14 14 19 14 Methods 41 41 40 46 46 46 41 47 46 N 9 O 10 P 65 Path name components 15 15 15 Preconditions client ( 12, 12) DC ( 12, 12) root target server ( 12, 12) Prerequisites client ( 12, 12) DC ( 12, 12) root target server ( 12, 12) 66 Protocol Details 24 R 46 46 46 41 47 46 9 10 9 19 Referral request 45 receiving DC referral request ( 46, 52) 46 domain referral request ( 46, 51) root or link referral request ( 47, 55) 46 39 Referral response algorithm for sorting target sites 45 44 receiving 42 44 41 41 42 43 11 16 16
Index A Abstract data model 24 51 root target server 45 44 44 44 12 C 13 75 Client 24 24 higher-layer triggered events 39 25 41 41 40 25 44 message processing 41 41 41 40 24 41 requirements ( 12, 12) sequencing rules 41 41 41 40 44 25 D Data model - abstract 24 51 root target server 45 44 44 44 58 24 44 19 20 21 21 22 22 Domain controller (DC) 51 51 51 56 message processing 52 51 55 54 50 requirements ( 12, 12) sequencing rules 52 51 55 54 56 51 58 57 60 59 61 E Events 44 50 44 50 Examples 58 57 60 59 61 64 64 F 13 G 6 H Higher-layer triggered events client 39 25 51 root target server 45 45 15 I
41 41 40 I/O operation to target failure 41 40 41 65 65 10 Initialization 25 51 45 45 Interfaces - client 24 Interfaces - server 44 6 L Local events 44 56 50 50 M Message processing client 41 41 41 40 DC 52 51 55 54 root target server 46 46 46 47 46 Messages syntax 14 14 19 14 Methods 41 41 40 46 46 46 41 47 46 N 9 O 10 P 65 Path name components 15 15 15 Preconditions client ( 12, 12) DC ( 12, 12) root target server ( 12, 12) Prerequisites client ( 12, 12) DC ( 12, 12) root target server ( 12, 12) 66 Protocol Details 24 R 46 46 46 41 47 46 9 10 9 19 Referral request 45 receiving DC referral request ( 46, 52) 46 domain referral request ( 46, 51) root or link referral request ( 47, 55) 46 39 Referral response algorithm for sorting target sites 45 44 receiving 42 44 41 41 42 43 11 16 16 17 18
</xs:complexType> </xs:element> Child Elements Element Type Description name xs:string MUST be the path of the file that is relative to the root. The path MUST begin with a folder name, followed by a backslash (\) and then by the name of each folder in the order in which they are opened; the folder names are separated by using a backslash. path N/A This element MUST be an empty string. The element SHOULD be ignored by the client. size xs:long The server MAY choose to populate this element with the original size, in bytes, of the file; or set this field to 0, which means that the size is not provided in the ; or exclude this field from the file element.<10>. timestamp timestamp The timestamp is an optional element of the file element. If the timestamp element is present in the file element, the server MAY provide a timestamp value<11> The format of this element is specified in section . affectedFileSet Element The affectedFileSet XML element represents information about the files that are involved in . <xs:element name="affectedFileSet"> <xs:complexType> <xs:sequence> <xs:element minOccurs="0" maxOccurs="unbounded" ref="file" /> </xs:sequence> <xs:attribute name="folder"> <xs:simpleType> <xs:restriction base="xs:string" > <xs:enumeration value="sharing" /> <xs:enumeration value="filtered" /> </xs:restriction> </xs:simpleType> </xs:attribute> </xs:complexType> </xs:element> Child Elements Element Type Description file file MUST be the information about the files that are involved in a specific replication issue. The format of this element is specified in . Attributes
Index _ 14 15 A Abstract data model 69 53 14 28 20 11 C 11 83 Client 69 70 69 70 70 70 70 69 CreateObject method ( 54, 58) D Data model - abstract 69 53 13 DeleteObject method ( 55, 59) 13 13 14 14 18 52 27 E 52 30 31 29 47 48 44 44 43 EVENT_DFSR_CONFIG_DS_UPDATE_FAILED ( 45, 46) 45 45 50 51 50 46 46 41 42 42 36 41 35 EVENT_DFSR_CS_OVERLAPPING_WITH_FRS1 ( 47, 48) 49 49 39 39 39 37 36 38 38 40 40 43 33 32 31 33 32 32 34 34 35 35 34 71 71 Examples 71 71 71 71 F 12 19 16 75 G GetCompressedReport method ( 63, 68) 65 66 65 GetReport method ( 62, 67) 7 H 71
Higher-layer triggered events 70 53 I 53 54 55 57 58 58 59 60 75 10 Initialization 69 53 7 61 63 65 66 65 62 L Local events 70 69 M Message processing 70 53 Messages 13 13 13 71 Methods ( 53, 70) ModifyObject method ( 57, 60) N 9 O 10 10 P 11 11 78 R 29 9 10 9 11 S 52 74 Sequencing rules 70 53 Server 53 53 53 69 53 53 69 53 24 16 26 23 21 12 13 T Timer events 70 69 Timers 69 53 16 83 18 13 Triggered events - higher-layer 70 53 V 12 11 15 X 16
Index A 13 14 9 C 9 19 D 13 14 12 E 12 16 F 9 10 10 FileTable 14 14 11 14 11 11 11 G 5 H 14 I 17 17 17 7 14 5 L 15 M 15 Messages 10 11 11 10 10 10 10 10 N 7 O 8 8 P 17 17 8 8 18 Protocol Details 13 R 7 7 7 8 S 12 17 17 17 15 14 9 10 T 15 14 19 10 10 14 V 9 9 10 10 10
Index A Abstract data model 35 25 12 C 13 61 CLAIM_VOLUME ( 31, 42) Client 35 43 48 46 45 46 39 48 39 40 48 47 48 49 42 44 44 39 42 44 37 44 14 15 14 CREATE_VOLUME ( 33, 43) 15 15 D Data model - abstract 35 25 14 DELETE_NOTIFY message ( 34, 43) 46 E 51 F 13 Files 48 48 48 FIND_VOLUME ( 32, 43) 45 54 G 6 I 54 53 53 9 46 Initialization 39 26 6 L 27 39 Local events 48 48 48 48 49 35 M Message processing 39 27 Messages 14 DELETE_NOTIFY message ( 34, 43) MOVE_NOTIFICATION message ( 28, 40) REFRESH message ( 30, 42) SEARCH message ( 34, 44) SYNC_VOLUMES message ( 30, 42) 14 MOVE_NOTIFICATION message ( 28, 40) 47 N 9 O 16 22 Other local events 35 10 10 P
Index A Abstract data model 35 25 12 C 13 61 CLAIM_VOLUME ( 31, 42) Client 35 43 48 46 45 46 39 48 39 40 48 47 48 49 42 44 44 39 42 44 37 44 14 15 14 CREATE_VOLUME ( 33, 43) 15 15 D Data model - abstract 35 25 14 DELETE_NOTIFY message ( 34, 43) 46 E 51 F 13 Files 48 48 48 FIND_VOLUME ( 32, 43) 45 54 G 6 I 54 53 53 9 46 Initialization 39 26 6 L 27 39 Local events 48 48 48 48 49 35 M Message processing 39 27 Messages 14 DELETE_NOTIFY message ( 34, 43) MOVE_NOTIFICATION message ( 28, 40) REFRESH message ( 30, 42) SEARCH message ( 34, 44) SYNC_VOLUMES message ( 30, 42) 14 MOVE_NOTIFICATION message ( 28, 40) 47 N 9 O 16 22 Other local events 35 10 10 P
53 12 12 58 Protocol Details 25 Q QUERY_VOLUME ( 32, 43) R 9 9 9 REFRESH message ( 30, 42) 44 12 S SEARCH message ( 34, 44) Security 53 53 Sequencing rules 39 27 Server 25 34 26 35 27 28 35 30 34 27 30 35 26 13 SYNC_VOLUMES message ( 30, 42) T Timer events 44 35 Timers 37 26 61 14 15 20 19 20 22 20 16 17 17 21 22 23 22 V 13 13 49 44
Index A Abstract data model client ( 11, 12) server ( 11, 13) 9 9 11 11 C 9 21 Client abstract data model ( 11, 12) higher-layer trigger events ( 11, 12) initialization ( 11, 12) local events ( 12, 13) message processing ( 11, 12) message sequencing ( 11, 12) 12 13 timer events ( 12, 13) timers ( 11, 12) D Data model - abstract 12 13 Data model – abstract client ( 11, 12) server ( 11, 13) E 15 F 9 9 G 7 H Higher-layer trigger events client ( 11, 12) server ( 11, 13) 14 I 17 17 17 8 Initialization client ( 11, 12) server ( 11, 13) 7 L Local events client ( 12, 13) server ( 12, 14) M Message processing client ( 11, 12) server ( 11, 13) Message sequencing client ( 11, 12) server ( 11, 13) Messages syntax ( 10, 10) transport ( 10, 10) N Name 14 14 Nonce 12 13 7 O Opaque directive 12 12 Other local events 13 14 8 8 P 17 17 9 9 14 18 Protocol Details 11 Q 12 13 R Realm directive ( 11, 14)
Index A 6 B 17 17 C 22 Complex types 10 11 10 9 8 9 11 9 D Data 12 12 8 Details 8 data 12 12 10 11 10 8 9 9 12 8 12 11 9 10 E Encryption rules - data 12 12 Examples 17 17 15 15 16 F Fields 20 7 20 7 G 5 I 11 10 20 20 6 5 L 6 N 8 6 O 9 6 P 9 21 R 5 6 6 6 S Security 20 20 12 Shell Publishing data 8 15 15 16 Simple types 12 12 Structures 8 12
Index A Abstract data model 20 24 11 C 11 32 18 D Data model - abstract 20 24 18 Device 20 20 21 21 22 24 20 21 22 24 20 22 9 DRM Receiver Service ( 12, 19) 12 DRM Transmitter Service ( 16, 19) E Events 24 27 24 27 28 F 11 G 6 H Higher-layer triggered events 21 25 Host 24 24 25 25 27 25 20 26 27 25 27 25 I 30 30 8 Initialization 21 25 14 14 6 L Local events 24 27 M 25 Messages 18 18 DRM Receiver Service ( 12, 19) DRM Transmitter Service ( 16, 19) 12 12 N
7 O Operations 22 21 26 22 27 22 8 P 30 10 10 31 Protocol Details 20 R 7 8 7 12 13 16 17 14 16 18 18 9 9 10 S Security 30 30 25 11 12 T Timer events 24 27 Timers 20 25 32 12 U 13 13 V 11 11 W 10 17 15
Index A Abstract data model 25 30 12 C 12 39 Client 25 26 25 local events 29 29 26 24 26 29 25 31 16 D Data model - abstract 25 30 34 17 14 16 E 35 F 13 G 20 22 6 H Higher-layer triggered events 26 31 I 37 37 7 Initialization 25 31 6 L Local events client 29 29 proxy 34 34 M Message processing 26 31 Messages 11 12 12 12 14 11 14 14 14 N 7 O OSI layers 9 10 9 8 10 9 10 11 11 7 P 37 12 12 38 Protocol Details 24 Proxy local events 34 34 R
Index A 18 9 C 9 28 CreateService 18 D DeleteService 19 17 8 E 20 F 9 G 13 13 16 10 10 11 6 H 18 I 22 22 7 18 6 L 19 M 18 Messages 13 10 10 12 10 N 6 O 7 P 22 9 9 23 10 10 Protocol Details 17 24 R 6 7 6 8 8 8 S Security 22 22 18 12 12 13 9 T 19 18 28 10 18 18 V 9 9
8/27/2010 4.3 None No changes to the meaning, language, or formatting of the technical content. 10/8/2010 4.3 None No changes to the meaning, language, or formatting of the technical content. 11/19/2010 4.3 None No changes to the meaning, language, or formatting of the technical content. 1/7/2011 4.3 None No changes to the meaning, language, or formatting of the technical content. 2/11/2011 5.0 Major Updated and revised the technical content. 3/25/2011 6.0 Major Updated and revised the technical content. 5/6/2011 7.0 Major Updated and revised the technical content. 6/17/2011 7.1 Minor Clarified the meaning of the technical content. 9/23/2011 7.1 None No changes to the meaning, language, or formatting of the technical content. 12/16/2011 8.0 Major Updated and revised the technical content. 3/30/2012 8.0 None No changes to the meaning, language, or formatting of the technical content. 7/12/2012 8.0 None No changes to the meaning, language, or formatting of the technical content. 10/25/2012 9.0 Major Updated and revised the technical content. 1/31/2013 9.0 None No changes to the meaning, language, or formatting of the technical content. 8/8/2013 10.0 Major Updated and revised the technical content. 11/14/2013 10.0 None No changes to the meaning, language, or formatting of the technical content. 2/13/2014 10.1 Minor Clarified the meaning of the technical content. 5/15/2014 10.1 None No changes to the meaning, language, or formatting of the technical content. 6/30/2015 11.0 Major Significantly changed the technical content. 10/16/2015 11.0 None No changes to the meaning, language, or formatting of the technical content. 7/14/2016 11.0 None No changes to the meaning, language, or formatting of the technical content. 6/1/2017 11.0 None No changes to the meaning, language, or formatting of the technical content.
Index A Abstract data model 16 16 9 9 C 10 28 Client 16 16 16 16 16 16 16 16 11 D Data model - abstract 16 16 Data model – abstract 16 16 11 11 15 12 13 13 14 14 13 11 19 19 E 15 Events 16 21 16 21 22 22 F 10 10 24 G 6 H Higher-layer triggered events 16 18 I 24 23 23 9 Initialization 16 17 6 L Local events 16 21 M Message processing 16 19 Messages 11 11 11 Methods 19 N 9 O 9 P 23 23 13 13 11 9 9 26 R 8 9 9
OperationState: The domain membership role change status of the computer, as specified by a enumeration. DSROLE_OPERATION_STATE The DSROLE_OPERATION_STATE enumeration specifies values that determine whether a or operation is currently being performed on a computer.<4> typedef enum _DSROLE_OPERATION_STATE { DsRoleOperationIdle = 0, DsRoleOperationActive, DsRoleOperationNeedReboot } DSROLE_OPERATION_STATE; DsRoleOperationIdle: No promotion or demotion operation is currently being performed on the computer. DsRoleOperationActive: A promotion or demotion operation is in progress. DsRoleOperationNeedReboot: A promotion or demotion operation has been performed. The computer MUST be restarted to function in the new role. DSROLE_UPGRADE_STATUS_INFO The DSROLE_UPGRADE_STATUS_INFO structure contains information about the status of a pending , if any, for the computer. This structure is intended to store only the status of an operating system upgrade of a . typedef struct _DSROLE_UPGRADE_STATUS_INFO { unsigned __int32 OperationState; DSROLE_SERVER_STATE PreviousServerState; } DSROLE_UPGRADE_STATUS_INFO, *PDSROLE_UPGRADE_STATUS_INFO; OperationState: The current status of the upgrade. Valid values are shown in the following table.<5> Value Meaning 0x00000000 No upgrade is currently in progress. DSROLE_UPGRADE_IN_PROGRESS 0x00000004 An upgrade is currently in progress. PreviousServerState: The role of the computer prior to the upgrade. The value of this member is valid only if an upgrade is in progress (that is, if the OperationState member is set to DSROLE_UPGRADE_IN_PROGRESS). DSROLE_SERVER_STATE The DSROLE_SERVER_STATE enumeration specifies the role of the computer prior to the upgrade. typedef enum _DSROLE_SERVER_STATE { DsRoleServerUnknown = 0,
Index A Abstract data model 16 16 9 9 C 10 28 Client 16 16 16 16 16 16 16 16 11 D Data model - abstract 16 16 Data model – abstract 16 16 11 11 15 12 13 13 14 14 13 11 19 19 E 15 Events 16 21 16 21 22 22 F 10 10 24 G 6 H Higher-layer triggered events 16 18 I 24 23 23 9 Initialization 16 17 6 L Local events 16 21 M Message processing 16 19 Messages 11 11 11 Methods 19 N 9 O 9 P 23 23 13 13 11 9 9 26 R
Index A Abstract data model 16 10 12 12 C 10 35 12 12 D Data model - abstract 16 12 E 12 Events 25 25 F 10 32 G 5 12 I 31 31 8 Initialization 16 5 L Local events 25 M Message processing 16 Messages 12 12 12 12 12 11 12 11 12 11 11 N 11 6 O Operations 23 16 8 P 31 9 9 34 R 6 8 6 8 S 12 Security 31 31 Sequencing rules 16 Server 16 16 25 16 23 16 16 25 16 12 10 Syntax 11 T Timer events 25 Timers
Index A Abstract data model 213 115 215 215 16 C 16 286 Client 213 213 214 214 214 214 213 217 217 18 D Data model - abstract 213 115 Data types 18 18 E 217 217 Events 214 211 214 211 Examples 215 215 217 217 217 217 215 215 F 17 220 64 27 28 96 76 82 110 80 79 77 78 95 75 75 74 73 96 63 95 86 87 85 88 92 110 69 67 66 69 68 104 64 26 97 42 47 61 59 60 60 25 25 25 26 65 66 22 22 20 21 22 23 21 21 108 103 105 104 101 64 111 42 45 46 46 45 90 89
95 98 91 89 99 98 20 23 23 23 24 65 56 19 106 105 106 52 48 64 49 47 28 42 51 18 108 G 9 I 220 219 219 12 Initialization 213 118 9 L Local events 214 211 M Message processing 214 119 Messages 18 18 Methods 144 180 190 139 177 186 149 183 131 173 194 198 203 207 160 128 147 142 153 134 162 146 141 152 134 161 157 158 169 148 182 192 143 179 188 154 185 135 175 196 201 205 209 163 169 155 156 159 136 172 129 170 127 167 193 165 189 168 164 197 202 206 210 166 128 145 181 191 138 140 178 187
150 184 133 174 195 200 204 208 130 160 N 12 O 215 215 13 13 P 219 219 64 28 96 82 80 79 78 95 75 96 95 92 69 69 68 97 25 25 25 22 22 20 21 22 23 21 21 101 64 111 45 46 46 89 98 89 99 23 23 24 65 106 105 106 52 51 16 16 276 Protocol Details 115 R 12 12 12 15 144 144 180 180 190 190 139 139 177 177 186 RRPC_FWAddConnectionSecurityRule2_20 method ( 186, 195) 149 149 183 183 131 131 173 173 194 194 198 198 203 207 160 160 128 128 147 147 142 142 153 153 134 134 162 162 146 146 141 141 152
152 134 134 161 161 157 157 158 158 169 169 148 148 182 182 192 192 143 143 179 179 188 188 154 154 185 185 135 135 175 175 196 196 201 201 205 209 163 163 169 169 155 155 156 156 159 159 136 136 172 172 129 129 170 170 187 127 127 167 167 193 193 165 165 189 189 168 168 164 164 197 197 202 202 206 210 166 166 128 128 145 145 181 181 191 191 138 138 140 140 178 178 187 150 150 184 184 133 133 174 174 195 200 200 204 208 130 130 160 160 S Security 219 219 Sequencing rules 214 119 Server 115 118 211 119 144 180 190 139 177 186
FSCTL_OFFLOAD_READ Request The FSCTL_OFFLOAD_READ Request message requests that the server perform an operation to a specified portion of a file on a target volume. On the client side, this request is received, processed, and sent down to an intelligent storage subsystem that generates and returns a in an message. This Token logically represents the data to be read and can be used with an and an pair to complete the data movement.<62> The request message contains an FSCTL_OFFLOAD_READ_INPUT data element, as follows. 0 1 2 3 4 5 6 7 8 9 1 0 1 2 3 4 5 6 7 8 9 2 0 1 2 3 4 5 6 7 8 9 3 0 1 Size Flags TokenTimeToLive Reserved FileOffset ... CopyLength ... Size (4 bytes): A 32-bit unsigned integer that indicates the size, in bytes, of this data element. Flags (4 bytes): A 32-bit unsigned integer that indicates the flags to be set for this operation. Currently, no flags are defined. This field SHOULD be set to 0x00000000 and MUST be ignored. TokenTimeToLive (4 bytes): A 32-bit unsigned integer that contains the requested Time to Live (TTL) value in milliseconds for the generated Token. This value MUST be greater than or equal to 0x00000000. A value of 0x00000000 represents a default TTL interval.<63> Reserved (4 bytes): A 32-bit unsigned integer field that is reserved. This field SHOULD be set to 0x00000000 and MUST be ignored. FileOffset (8 bytes): A 64-bit unsigned integer that contains the file offset, in bytes, of the start of a range of bytes in a file from which to generate the Token. The value of this field MUST be greater than or equal to 0x0000000000000000 and MUST be aligned to a logical sector boundary on the volume. CopyLength (8 bytes): A 64-bit unsigned integer that contains the size, in bytes, of the requested range of the file from which to generate the Token. The value of this field MUST be greater than or equal to 0x0000000000000000 and MUST be aligned to a logical sector boundary on the volume.<64>
Index A 40 23 14 B 39 26 C 190 76 26 15 D Data elements 25 21 23 15 26 15 79 Details 15 E 168 42 52 F 41 Fields 15 14 14 166 96 153 98 100 101 115 143 88 89 88 117 130 25 25 152 21 21 22 135 136 140 141 64 144 145 77 98 101 102 102 103 104 106 108 110 110 111 154 156 165 158 159 160 160 161 163 164 112 114 116 117 120 122 125 FileLinkInformation packet ( 126, 126, 127) 128 129 131 131 132 134 136 137 140 143 145 146
AUTH SSL Message Handling The client can send an AUTH SSL message when used with instead of AUTH TLS. It MUST assume that the server will process it identically to an AUTH TLS message. FEAT Message Handling The handling of a FEAT message on the client is not affected by this protocol. AUTH Message Handling The client SHOULD NOT send AUTH TLS or AUTH SSL messages over the connection. These messages will always be rejected by the server because the implicit AUTH TLS command has already been processed and additional messages sent over the already encrypted session are not allowed. Timer Events None. Other Local Events None. Server Role Details Abstract Data Model No new abstract data model is introduced beyond the existing underlying protocol. Timers None. Initialization To implement the support, the server SHOULD listen on the default port 990, as assigned by IANA. The server MAY choose to listen on a custom port. Higher-Layer Triggered Events None. Message Processing Events and Sequencing Rules Control Connection Negotiation with Implicit FTPS When a client connects to the TCP port dedicated for , the server MUST NOT send the connection greeting message immediately. Instead, the server MUST assume that the AUTH TLS message was sent by the client. The server MUST do internal processing identical to handling an AUTH TLS message without sending a positive reply to the client. The client MUST assume that a positive reply was sent in response to the implicit AUTH TLS message. TLS session negotiation will follow as specified in .
Index A 11 8 12 9 12 C 8 12 18 11 14 D 11 Details 12 12 12 11 12 12 E Events 13 12 Example 14 14 F 12 8 8 G 6 H 11 I 16 16 7 11 6 L 13 M Message handling 12 12 12 11 12 12 Messages 9 9 9 9 N 6 O 7 7 P 16 7 7 17 R 6 7 6 12 7 14 S Security 16 16 8 9 T 12 11 18 9 11 V 8
Index A Abstract data model 26 27 Administrative-side plug-in 26 26 26 27 26 26 26 27 26 13 Audit options 30 22 22 C 13 35 Client-side plug-in 27 28 28 29 28 27 28 29 28 31 D Data model – abstract 26 27 E Examples 30 31 31 30 30 F 13 13 G Global object access audit settings 31 24 24 6 H Higher-layer triggered events 26 28 I 32 9 Initialization 26 28 6 L Local events 27 29 M 25 25 Message processing 26 28 Messages 22 24 25 16 syntax 22 24 25 15 16 15
N 8 O 9 9 9 9 P Parameters - security 32 32 30 13 13 33 R 8 9 8 13 S Security 32 32 32 Sequencing rules 26 28 13 16 16 Syntax 22 24 25 15 16 30 T Timer events 27 29 Timers 26 28 35 15 Triggered events – higher layer 26 28 V 13 13
Index A Abstract data model 23 25 Administrative plug-in 23 23 23 25 24 23 24 25 23 11 B 9 C 12 14 17 14 33 Client 25 26 26 27 26 27 25 26 26 25 D Data model - abstract 23 25 E EFS 19 20 21 19 10 13 21 20 19 20 21 19 13 21 20 17 17 18 28 F 12 G 6 H Higher-layer triggered events 23 26 I 30 30 9 Initialization 23 26 6 K 15 L Local events 25 27 M Message processing 24 26 Messages 19 20 21 19 13 21 20 13 13 N 9
"CSE GUID" is set to the Group Policy: Registry Extension Encoding CSE GUID (defined in section 1.9). "TOOL GUID" is set to the Group Policy: Firewall and Advanced Security Data Structure Tool extension GUID (defined in section ). Timer Events None. Other Local Events None. Client Details Abstract Data Model The Group Policy: Firewall and Advanced Security Data Structure client maintains no state. However, it directly accesses the Policy Setting State from the Group Policy: Registry Extension Encoding, as specified in section 3.2.1.1. Timers None. Initialization The Group Policy: Firewall and Advanced Security Data Structure client initializes when the host machine starts. The client MUST use an implementation-specific<9> method to register for notification of the Policy Application event, as defined in section 3.2.7.3. The client MUST then query the registry using the key and value names defined in sections through to retrieve the initial policy settings. It MUST use the grammar rules defined in the same section to parse the values when necessary. Based on the data retrieved for these settings, the client MUST invoke the abstract interface SetGroupPolicyRSoPStore() (as specified in section 3.1.6.4) to modify the internal state of the Firewall and Advanced Security component. Higher-Layer Triggered Events None. Message Processing Events and Sequencing Rules None. Timer Events None.
Index A 85 Abstract data model 65 67 19 22 Administrative plug-in 65 65 65 67 message processing 66 policy administration 66 66 65 sequencing rules 66 policy administration 66 66 67 65 Allow 34 34 34 35 12 Authentication 70 36 36 B 22 C 12 15 89 Client 67 67 67 68 67 67 67 67 69 Connection security 56 56 56 69 56 56 44 44 D Data model - abstract 65 67 Default 36 35 Description 38 46 18 Disable 33 stateful 13 13 31 31 35 E 22 EmbeddedContext 38 46 30 Examples 70 69 69 69 F 12 Firewall 24 24 69 17 17 85 G 13 13 7 H Higher-layer triggered events 65 67 I
23 19 82 82 9 Initialization 65 67 19 19 7 IPsec 14 15 IPV4 address 20 20 IPV6 address 21 21 L Local events 67 68 Log 32 33 32 32 M Main mode 62 62 62 62 33 Message processing administrative plug-in 66 policy administration 66 66 67 Messages 19 22 allow 34 34 34 35 36 22 15 connection security 56 56 56 56 56 44 default 36 35 description 38 46 18 disable 33 stateful 13 13 31 31 35 22 EmbeddedContext 38 46 30 firewall 24 24 17 17 13 23 19 19 19 IPsec 14 15 IPV4 address 20 20 IPV6 address 21 21 log 32 33 32 32 main mode 62 62 62 62 33 name 37 45 30 phase 1 46 48 46 47 phase 1 auth suite 40 39 40 40
42 38 41 40 41 phase 1 suite 50 49 49 48 50 phase 2 47 51 phase 2 auth suite 40 39 40 42 38 41 40 41 phase 2 suite 54 53 54 55 52 52 52 51 53 53 52 platform validity 23 23 15 17 18 14 17 14 31 38 13 tunnel remote 16 16 version 37 45 N Name 37 45 8 O Overview 9 9 9 9 P 82 30 30 Phase 1 46 48 46 47 Phase 1 auth suite 40 39 40 40 42 38 41 40 41 Phase 1 suite 50 49 49 48 50 Phase 2 47 51 Phase 2 auth suite 40 39 40 42 38 41 40 41 Phase 2 suite 54 53 54 55 52 52 52 51 53 53 52 Platform validity 23 23 15 17 18 11 11 14 83 17
This value represents the contents assigned to the configuration option represented by the FW_GLOBAL_CONFIG_IPSEC_TRANSPORT_REMOTE_MACHINE_AUTHORIZATION_LIST enumeration value as defined in section 2.2.41. Transport Remote User Authorization List Key: Software\Policies\Microsoft\WindowsFirewall\ Value: "IPsecTransportRemoteUserAuthorizationList" Type: REG_SZ. Size: Equal to size of the Data field. Data: A variable-length, null-terminated string. This value represents the contents assigned to the configuration option represented by the FW_GLOBAL_CONFIG_IPSEC_TRANSPORT_REMOTE_USER_AUTHORIZATION_LIST enumeration value as defined in section 2.2.41. Packet Queue Key: Software\Policies\Microsoft\WindowsFirewall\ Value: "EnablePacketQueue" Type: REG_DWORD Size: Equal to size of the Data field. Data: This field is a 32-bit value. This value represents the contents assigned to the configuration option represented by the FW_GLOBAL_CONFIG_ENABLE_PACKET_QUEUE enumeration value as defined in section 2.2.41. Firewall Rule Messages This section defines the grammars used to encode different portions of the firewall rules. Profile Tokens This grammar, as specified in , is used to identify profile types. PROFILE_VAL = "Domain" / "Private" / "Public" Domain: This token value represents the FW_PROFILE_TYPE_DOMAIN enumeration value as defined in section 2.2.2. The remaining token values in this list can be found in the same Protocol specification section. Private: This token value represents the FW_PROFILE_TYPE_PRIVATE enumeration value. Public: This token value represents the FW_PROFILE_TYPE_PUBLIC enumeration value. Port and Port Range Rules This grammar is used to identify ports. PORT_RANGE_VAL = BEGINPORT "-" ENDPORT
40 40 42 38 41 40 41 phase 1 suite 50 49 49 48 50 phase 2 47 51 phase 2 auth suite 40 39 40 42 38 41 40 41 phase 2 suite 54 53 54 55 52 52 52 51 53 53 52 platform validity 23 23 15 17 18 14 17 14 31 38 13 tunnel remote 16 16 version 37 45 N Name 37 45 8 O Overview 9 9 9 9 P 82 30 30 Phase 1 46 48 46 47 Phase 1 auth suite 40 39 40 40 42 38 41 40 41 Phase 1 suite 50 49 49 48 50 Phase 2 47 51 Phase 2 auth suite 40 39 40 42 38 41 40 41 Phase 2 suite 54 53 54 55 52 52 52 51 53 53 52 Platform validity 23 23 15 17 18 11 11 14
Protocol syntax refers to data elements (such as packets, structures, enumerations, and methods) as well as interfaces. Protocol revision refers to changes made to a protocol that affect the bits that are sent over the wire. The changes made to this document are listed in the following table. For more information, please contact . Section Tracking number (if applicable) and description Major change (Y or N) Change type Normative References Removed reference [MS-SMB2]. N Content update. Informative References Removed reference [FAT32]. N Content update. Appendix A: Product Behavior Added Windows 10 to the applicability list. Y Content update. 6 Appendix A: Product Behavior Updated product behavior notes for Windows 10 and Windows Server 2016 Technical Preview. Y Product behavior note updated.
Index A Abstract data model 19 20 Administrative-side plug-in 19 20 19 19 20 9 20 19 10 B 8 C 11 31 Client-side plug-in 20 22 21 21 23 21 10 21 23 21 D Data model - abstract 19 20 E Examples 24 25 24 18 Extraneous data 20 22 F 11 16 15 13 15 17 G 6 H Higher-layer triggered events 19 21 I 27 27 8 Initialization 19 21 6 L 15 Local events 20 23 M 21 Messages 15 13 13 13 N
Index A Abstract data model 19 20 Administrative-side plug-in 19 20 19 19 20 9 20 19 10 B 8 C 11 31 Client-side plug-in 20 22 21 21 23 21 10 21 23 21 D Data model - abstract 19 20 E Examples 24 25 24 18 Extraneous data 20 22 F 11 16 15 13 15 17 G 6 H Higher-layer triggered events 19 21 I 27 27 8 Initialization 19 21 6 L 15 Local events 20 23 M 21 Messages 15 13 13 13 N 8 O 9 8 P 27 17 15 14 10 10 28 R 14 23 8 8
8/27/2010 12.0 Major Updated and revised the technical content. 10/8/2010 13.0 Major Updated and revised the technical content. 11/19/2010 14.0 Major Updated and revised the technical content. 1/7/2011 15.0 Major Updated and revised the technical content. 2/11/2011 16.0 Major Updated and revised the technical content. 3/25/2011 17.0 Major Updated and revised the technical content. 5/6/2011 18.0 Major Updated and revised the technical content. 6/17/2011 18.1 Minor Clarified the meaning of the technical content. 9/23/2011 19.0 Major Updated and revised the technical content. 12/16/2011 20.0 Major Updated and revised the technical content. 3/30/2012 20.0 None No changes to the meaning, language, or formatting of the technical content. 7/12/2012 20.1 Minor Clarified the meaning of the technical content. 10/25/2012 20.1 None No changes to the meaning, language, or formatting of the technical content. 1/31/2013 20.1 None No changes to the meaning, language, or formatting of the technical content. 8/8/2013 21.0 Major Updated and revised the technical content. 11/14/2013 21.0 None No changes to the meaning, language, or formatting of the technical content. 2/13/2014 21.1 Minor Clarified the meaning of the technical content. 5/15/2014 21.1 None No changes to the meaning, language, or formatting of the technical content. 6/30/2015 22.0 Major Significantly changed the technical content. 10/16/2015 22.0 None No changes to the meaning, language, or formatting of the technical content. 7/14/2016 22.0 None No changes to the meaning, language, or formatting of the technical content. 6/1/2017 22.0 None No changes to the meaning, language, or formatting of the technical content. 9/15/2017 23.0 Major Significantly changed the technical content. 9/12/2018 24.0 Major Significantly changed the technical content.
Index A Abstract data model 61 67 Administrative 61 61 61 62 71 62 67 61 14 C 14 82 Client 67 68 67 68 67 74 68 70 67 D Data model - abstract 61 67 59 E 59 Examples 71 74 71 F 14 G 6 H Higher-layer triggered events 61 68 I 78 78 78 9 Initialization 61 67 6 56 16 57 45 24 39 21 M Message processing 62 68 Messages 56 16 57 16 16 N 8 O 10 P 78 78 Policy 71 56 74 16 14 14 79 R 8 9 8 13 S 59
Protocol Examples Global Policy Configuration Messages The following is an example of Name Resolution Policy global options to query for both IPv4 and IPv6, always allow fallback to LLMNR and NetBIOS, and to enable Name Resolution Policy behavior only when not physically connected to the corporate network. Key: SOFTWARE\Policies\Microsoft\Windows NT\DNSClient Value: "DirectAccessQueryOrder" Type: REG_DWORD Size: 32 bits. Data: 00000001 Value: "DnsSecureNameQueryFallback" Type: REG_DWORD Size: 32 bits. Data: 00000001 Value: "EnableDAForAllNetworks" Type: REG_DWORD Size: 32 bits. Data: 00000000 Name Resolution Policy Messages The following are examples of individual Name Resolution Policy entries specifying DNSSEC, DirectAccess, and both. DirectAccess The following is an example of a Name Resolution Policy entry to apply DirectAccess for names under the directaccess.example.com domain. The policy specifies the DNS servers to query and requires IPsec with medium encryption but no CA restriction or proxy. Key: SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DnsPolicyConfig\{Rule GUID} Value: "Version" Type: REG_DWORD Size: 32 bits. Data: 00000001 Value: "Name" Type: REG_MULTI_SZ.
Protocol syntax refers to data elements (such as packets, structures, enumerations, and methods) as well as interfaces. Protocol revision refers to changes made to a protocol that affect the bits that are sent over the wire. The changes made to this document are listed in the following table. For more information, please contact . Section Tracking number (if applicable) and description Major change (Y or N) Change type Appendix A: Product Behavior Added Windows 10 to the applicability list. Y Content update.
Index A 18 18 9 16 C 9 30 11 D 18 DirectAccess 14 Proxy 14 14 Query IPsec 15 15 11 10 DNSSEC Query IPsec 12 13 13 E 10 Examples 20 Name Resolution Policy messages 20 23 22 24 25 20 F 9 G 15 Global Policy Configuration 20 10 10 5 H 18 I 16 27 27 7 18 5 13 L 19 M 18 Messages 10 11 10 10 10 Name Resolution Policy 16 11 DirectAccess 14 Proxy 14 14 Query IPsec 15 15 DNSSEC Query IPsec 12 13 13 15 16 13
11 11 16 17 12 11 10 N 11 Name Resolution Policy 11 message example 20 23 22 24 25 20 8 11 7 O Overview 8 8 8 8 P 27 27 9 9 28 16 17 R 7 7 7 9 S Security 27 27 18 9 T 19 18 30 10 18 V 9 12 9
Index A Abstract data model administrative tool 55 group policy 55 55 54 37 39 cache 41 41 40 configured computer 39 39 40 user 40 40 37 40 39 41 38 39 GPO 38 37 40 39 41 39 37 policy application 39 37 target 39 41 41 policy target 41 SOM 39 38 40 35 Administrative tool abstract data model 55 group policy 55 55 54 higher-layer triggered events group policy 56 57 57 56 56 57 55 63 message processing GPO 58 60 59 59 link 62 62 59 organizational unit 63 63 60 sequencing rules GPO 58 60 59 59 link 62 62 59 organizational unit 63 63 60 63 55 17 C 18 80 Client 37 39 cache 41 41 40 configured computer 39 39 40 user 40 40 37 40 39 41
68 68 F 18 G 7 GPO creation 28 69 extension update 31 71 23 property update 31 71 read administration 27 69 69 15 search 67 66 67 28 27 23 28 72 Group policy 16 15 H Higher-layer triggered events administrative tool group policy 56 57 57 56 56 57 42 42 42 36 I 73 73 13 Initialization 55 42 36 7 L 27 Local events 63 54 36 M Message processing administrative tool GPO 58 60 59 59 link 62 62 59 organizational unit 63 63 60 client 53 43 36 Messages 20 21 GPO 28 32 31 31 27 23 28 27 23 28 27 organizational unit 32 33 22 32 19 19 26 14 N 12 O 14 Organizational unit 32
33 Other local events 36 Overview 14 14 policy 16 application 15 15 group policy 16 15 15 14 14 14 P 73 Policy 16 application 15 group policy 16 15 15 15 14 17 17 74 Protocol Details 35 R 12 13 12 16 S 33 Security 73 73 Sequencing rules administrative tool GPO 58 60 59 59 link 62 62 59 organizational unit 63 63 60 client 53 43 36 Server 35 15 36 36 36 36 36 36 36 36 Site search configurationNamingContext 66 65 22 65 66 22 SOM property update 32 72 18 19 T Timer events 63 54 36 Timers 55 41 36 80 19 19 Triggered events - higher-layer administrative tool group policy 56 57 57 56 56 57 42 42 42 36 U 14 V 18 18
38 40 37 38 GPO 37 36 39 38 40 38 36 policy application 38 36 target 38 40 40 policy target 40 SOM 38 37 39 41 41 41 41 53 message processing 52 42 sequencing rules 52 42 53 40 14 D Data model - abstract administrative tool 54 group policy 54 54 53 36 38 cache 40 40 39 configured computer 38 38 39 user 39 39 36 39 38 40 37 38 GPO 37 36 39 38 40 38 36 policy application 38 36 target 38 40 40 policy target 40 SOM 38 37 39 34 33 20 Domain SOM 63 63 search 21 63 21 E 33 Examples domain SOM 63 63 63 GPO 68 70 70 read administration 68 68 search 66 65 66 71 63 site search configurationNamingContext 65 64 64 65
71 WMI filter search 67 67 F 18 G 7 GPO creation 28 68 extension update 31 70 23 property update 31 70 read administration 27 68 68 15 search 66 65 66 28 27 23 28 71 Group policy 16 15 H Higher-layer triggered events administrative tool group policy 55 56 56 55 55 56 41 41 41 35 I 72 72 13 Initialization 54 41 35 7 L 27 Local events 62 53 35 M Message processing administrative tool GPO 57 59 58 58 link 61 61 58 organizational unit 62 62 59 client 52 42 35 Messages 20 21 GPO 28 32 31 31 27 23 28 27 23 28 27 organizational unit 32 32 22 32 19 19 26 14 N 12 O 14
Organizational unit 32 32 Other local events 35 Overview 14 14 policy 16 application 15 15 group policy 16 15 15 14 14 14 P 72 Policy 16 application 15 group policy 16 15 15 15 14 17 17 73 Protocol Details 34 R 12 13 12 16 S 33 Security 72 72 Sequencing rules administrative tool GPO 57 59 58 58 link 61 61 58 organizational unit 62 62 59 client 52 42 35 Server 34 15 35 35 35 35 35 35 35 35 Site search configurationNamingContext 65 64 22 64 65 22 SOM property update 32 71 18 19 T Timer events 62 53 35 Timers 54 40 35 78 19 19 Triggered events - higher-layer administrative tool group policy 55 56 56 55 55 56 41 41 41 35 U 14 V
Index A Abstract data model 29 31 15 Administrative 29 higher-layer triggered events 29 29 30 message processing 30 30 29 30 29 sequencing rules 30 30 29 30 30 29 11 17 48 B 9 C 11 53 Client 31 31 31 47 message processing 34 event 40 40 45 46 39 36 32 33 42 registry 42 41 43 47 31 sequencing rules 34 event 40 40 45 46 39 36 32 33 42 registry 42 41 43 47 47 31 26 26 D Data model - abstract 29 31 E 27 27 28 18 18 17 17 48 9 F 11 24 24 25 G 6 Group membership ( 24, 48) 24 H Higher-layer triggered events administrative 29 31 I 50 50
9 Initialization 29 31 6 K 16 16 22 L 16 Local events 30 47 M Membership - group ( 24, 48) Message processing administrative 30 30 29 30 client 34 event 40 40 45 46 39 36 32 33 42 registry 42 41 43 47 Messages 18 17 24 24 16 21 22 21 23 12 13 12 25 N 8 O 9 P Parameters - security 50 50 50 Password policies ( 13, 48) Policies 15 17 18 17 16 16 password ( 13, 48) 17 17 10 10 21 21 51 28 R 8 9 8 Registry 22 21 22 21 10 21 S Security 9 24 50 50 17 Sequencing rules administrative 30 30 29 30 client 34 event 40 40 45 46 39 36 32
Index A 8 6 C 6 15 8 D 8 8 E 10 F 6 G 5 H 8 I 13 13 6 8 5 L 9 M 8 Messages 7 7 7 N 5 O Overview 8 6 6 P 13 6 6 14 R 5 6 5 6 S 6 Security 13 13 8 6 7 T 9 8 15 7 8 V 6 6
Index A 9 9 6 C 6 13 D 9 9 7 7 E 10 F 6 G 5 H 9 9 I 11 11 6 9 9 5 L 9 7 7 M 9 Messages 7 7 7 7 7 N 10 5 O Other local events 9 6 P 11 6 6 12 R 5 6 5 6 S Security 11 11 9 Server 9 9 9 9 9 9 6 7 T 7 7 9 9 9 9 13 7 9 9 V 6 6
Index A Abstract data model 8 9 6 C 6 14 Client 8 8 8 8 8 8 8 8 D Data model - abstract 8 9 E 10 F 6 G 4 H Higher-layer triggered events 8 9 7 I 11 11 5 Initialization 8 9 4 M Message processing 8 9 Messages 7 7 7 7 7 7 N 4 O Other local events 8 9 5 P 11 6 6 12 R 9 4 5 4 6 10 10 7 S Security 11 11 11 Sequencing rules 8 Server 9 9 9 9 9 9 9 6 T Timer events 8 9 Timers 8
Index A Abstract data model 13 16 8 C 9 27 Client 13 15 15 15 15 14 16 message processing 15 15 16 15 15 16 12 sequencing rules 15 15 16 15 15 16 14 unauthorized connecting to server certificate not valid example ( 21, 21) 22 D Data model - abstract 13 16 E Examples 24 20 20 unauthorized client connecting to server certificate not valid ( 21, 21) 22 23 F 9 G 6 H Higher-layer triggered events 15 15 15 15 17 17 17 17 I 25 25 7 Initialization 14 17 17 17 6 L Local events 16 server 19 19 19 M 24 Message processing client 15 15 16 15 15 server 17 17 18 17 Messages 11 10 N 6 O Other local events 16
18 7 P 20 25 8 8 26 Protocol Details 12 R 6 7 6 7 S Security 25 25 Sequencing rules client 15 15 16 15 15 server 17 17 18 17 Server 16 17 17 17 17 17 17 17 local events 19 19 19 message processing 17 17 18 17 18 sequencing rules 17 17 18 17 18 17 23 9 11 T Timer events 16 18 Timers 14 17 27 10 Triggered events client 15 15 15 server 17 17 17 Triggered events - higher-layer 15 17 V 9 9
Protocol syntax refers to data elements (such as packets, structures, enumerations, and methods) as well as interfaces. Protocol revision refers to changes made to a protocol that affect the bits that are sent over the wire. The changes made to this document are listed in the following table. For more information, please contact . Section Tracking number (if applicable) and description Major change (Y or N) Change type KERB-EXT-ERROR Added content defining the structure for extended errors. Y New content added. KERB-ERROR-DATA Updated content to include data-type and data-value for extended errors. Y Content update. Supported Encryption Types Bit Flags 72603 : Updated product behavior note with the proper product versions and features. N Product behavior note updated. SupportedEncryptionTypes Removed as redundant. N Product behavior note removed. Determining Authentication Policy Silo Membership 69290 : Updated to use BelongsToSilo rather than SiloName. Y Content update. Determining Authentication Policy Settings 69290 : Updated to clarify that BelongsToSilo == TRUE indicates that the account belongs to a silo. Y Content update. AS Exchange 69290 : Updated to remove reference to additional rights GUID. Y Content update. 3.3.5.6 AS Exchange Updated to clarify that if pre-authentication used DES or RC4, the KDC MUST return KDC_ERR_ETYPE_NOTSUPP. Y Content update. 3.3.5.6 AS Exchange 72320 : Removed reference to the UseDESOnly flag. Y Content update. KERB_VALIDATION_INFO Structure Updated content for Windows Server 2016 Technical Preview operating system. Y Content update. TGS Exchange 69290 : Updated to clarify behavior if domainControllerFunctionality returns a value >= 6. Y Content update. Domain Local Group Membership Updated content for Windows Server 2016 Technical Preview operating system. Y Content update. 3.3.5.7.3 Domain Local Group Membership 72603 : Updated product behavior note with the proper product versions and features. N Product behavior note updated. Appendix A: Product Behavior Updated the product applicability list and product behavior notes to include Windows 10 operating system. Y Content update.
KDC 40 overview ( 25, 40) 55 I 69 69 13 32 Initialization Application Server ( 25, 54) client ( 25, 32) KDC ( 25, 39) 54 62 28 7 K KDC abstract data model ( 24, 36) higher-layer triggered events 40 overview ( 25, 40) 30 initialization ( 25, 39) local events ( 30, 54) message processing ( 25, 40) 24 sequencing rules ( 25, 40) timer events ( 30, 54) timers ( 25, 39) 21 21 25 14 19 19 19 20 20 20 Keys 30 29 29 16 L Local events Application Server ( 30, 61) client ( 30, 36) KDC ( 30, 54) 33 Logon 32 62 63 20 20 M 25 Message processing 28 Application Server ( 25, 55) 28 28 client ( 25, 32) 27 26 28 KDC ( 25, 40) 29 29 33 29 41 26 29 55 27 Messages 21 19 19 20 20 20 22 22 22 21 19 19 N 29 63 11 O 22 22 25 Other local events 36 61 13
Application Server ( 25, 54) client ( 25, 32) KDC ( 25, 39) 54 62 28 7 K KDC abstract data model ( 24, 36) higher-layer triggered events 40 overview ( 25, 40) 30 initialization ( 25, 39) local events ( 30, 54) message processing ( 25, 40) 24 sequencing rules ( 25, 40) timer events ( 30, 54) timers ( 25, 39) 21 21 25 14 19 19 19 20 20 20 Keys 30 29 29 16 L Local events Application Server ( 30, 61) client ( 30, 36) KDC ( 30, 54) 33 Logon 32 62 63 20 20 M 25 Message processing 28 Application Server ( 25, 55) 28 28 client ( 25, 32) 27 26 28 KDC ( 25, 40) 29 29 33 29 41 26 29 55 27 Messages 21 19 19 20 20 20 22 22 22 21 19 19 N 29 63 11 O 22 22 25 Other local events 36 61 13 P 41 22 22 69 69 22 22 20 17 26 17 17 70 Protocol Details 24 Public keys - implementing 30 30 30 R 67
Index A Abstract data model Application Server ( 24, 57) client ( 24, 30) KDC ( 24, 36) 57 28 69 36 17 Application Server abstract data model ( 24, 57) higher-layer triggered events ( 25, 58) 30 initialization ( 25, 57) local events ( 30, 64) message processing ( 25, 58) overview ( 24, 57) sequencing rules ( 25, 58) timer events ( 30, 64) timers ( 25, 57) 35 Authentication 59 17 32 59 33 Authorization data 28 60 C Calls 63 63 64 61 17 28 79 Client abstract data model ( 24, 30) higher-layer triggered events ( 25, 32) 30 initialization ( 25, 32) local events ( 30, 36) message processing ( 25, 33) 36 24 sequencing rules ( 25, 33) timer events ( 30, 36) timers ( 25, 32) 15 24 D Data model - abstract Application Server ( 24, 57) client ( 24, 30) KDC ( 24, 36) 57 59 59 22 34 34 E 22 27 Encryption types ( 17, 26) Encryption types - bit flags ( 21, 25) Examples 69 67 65 66 65 70 F 17 Flags 33 33 Flexible Authentication Secure Tunneling (FAST) 15 34 35 G 7 63 63 64 67 61 H Higher-layer triggered events Application Server ( 25, 58) client ( 25, 32) KDC 40 overview ( 25, 40) 58 I 72 72 13 32 Initialization
Application Server ( 25, 57) client ( 25, 32) KDC ( 25, 39) 57 65 28 7 K KDC abstract data model ( 24, 36) higher-layer triggered events 40 overview ( 25, 40) 30 initialization ( 25, 39) local events ( 30, 57) message processing ( 25, 40) 24 sequencing rules ( 25, 40) timer events ( 30, 57) timers ( 25, 39) 21 21 25 14 19 19 19 20 20 20 Keys 30 29 29 15 L Local events Application Server ( 30, 64) client ( 30, 36) KDC ( 30, 57) 34 Logon 32 65 66 20 20 M 25 Message processing 28 Application Server ( 25, 58) 28 28 client ( 25, 33) 27 26 28 KDC ( 25, 40) 29 29 34 29 43 26 29 58 27 Messages 21 19 19 20 20 20 22 22 22 21 19 19 N 29 66 11 O 22 22 25 Other local events 36 64 13 P 43 22 22 72 72 22 22 20 17 26 16 16 73 Protocol Details 24 Public keys - implementing 30 30 30 R 70
Index A Abstract data model Application Server ( 24, 57) client ( 24, 30) KDC ( 24, 36) 57 28 69 36 17 Application Server abstract data model ( 24, 57) higher-layer triggered events ( 25, 58) 30 initialization ( 25, 57) local events ( 30, 64) message processing ( 25, 58) overview ( 24, 57) sequencing rules ( 25, 58) timer events ( 30, 64) timers ( 25, 57) 35 Authentication 59 17 32 59 33 Authorization data 28 60 C Calls 63 63 64 61 17 28 79 Client abstract data model ( 24, 30) higher-layer triggered events ( 25, 32) 30 initialization ( 25, 32) local events ( 30, 36) message processing ( 25, 33) 36 24 sequencing rules ( 25, 33) timer events ( 30, 36) timers ( 25, 32) 15 24 D Data model - abstract Application Server ( 24, 57) client ( 24, 30) KDC ( 24, 36) 57 59 59 22 34 34 E 22 27 Encryption types ( 17, 26) Encryption types - bit flags ( 21, 25) Examples 69 67 65 66 65 70 F 17 Flags 33 33 Flexible Authentication Secure Tunneling (FAST) 15 34 35 G 7 63 63 64 67 61 H Higher-layer triggered events Application Server ( 25, 58) client ( 25, 32) KDC 40 overview ( 25, 40) 58 I 72 72 13 32 Initialization Application Server ( 25, 57) client ( 25, 32)
KDC ( 25, 39) 57 65 28 7 K KDC abstract data model ( 24, 36) higher-layer triggered events 40 overview ( 25, 40) 30 initialization ( 25, 39) local events ( 30, 57) message processing ( 25, 40) 24 sequencing rules ( 25, 40) timer events ( 30, 57) timers ( 25, 39) 21 21 25 14 19 19 19 20 20 20 Keys 30 29 29 15 L Local events Application Server ( 30, 64) client ( 30, 36) KDC ( 30, 57) 34 Logon 32 65 66 20 20 M 25 Message processing 28 Application Server ( 25, 58) 28 28 client ( 25, 33) 27 26 28 KDC ( 25, 40) 29 29 34 29 43 26 29 58 27 Messages 21 19 19 20 20 20 22 22 22 21 19 19 N 29 66 11 O 22 22 25 Other local events 36 64 13 P 43 22 22 72 72 22 22 20 17 26 16 16 73 Protocol Details 24 Public keys - implementing 30 30 30 R 70 11 13