[cifs-protocol] Please clarify LSA and OsVersion behaviour in MS-NRPC (SRX090713600128)

Bill Wesse billwe at microsoft.com
Fri Jul 24 07:22:35 MDT 2009

Good morning Andrew. I have attached the original response email for your convenience. I notice that I previously neglected to provide the case number, which is SRX090713600128.

The document changes are not yet available; I have placed some relevant notes below concerning where I have reported the [MS-NRPC] document to be deficient, and will advise you as soon as we have the change information.

[MS-NRPC]: Netlogon Remote Protocol Specification


The OsVersion member is an OSVERSIONINFOEX structure (284 bytes). <23> shows "5.2 (3790)" as an example, and there is no reference to OsVersion as an OSVERSIONINFOEX structure [MS-REF]

<23> Section The version and build number of the client operating system are used. For example, for Windows Server 2003 with SP1, the string "5.2 (3790)" is used, which indicates version 5.2 and build number 3790.

There is no clear format specification for the operatingSystemVersion string example. Additional clarification concerning where that is meaningfully defined ([MS-ADA3] 2.55; the only appearance of operatingSystemVersion in [MS-ADTS] is at Flag fRODCFilteredAttribute in Attribute searchFlags.

Bill Wesse
MCSE, MCTS / Senior Escalation Engineer, US-CSS DSC PROTOCOL TEAM
8055 Microsoft Way
Charlotte, NC 28273
TEL:  +1(980) 776-8200
CELL: +1(704) 661-5438
FAX:  +1(704) 665-9606

-----Original Message-----
From: Andrew Bartlett [mailto:abartlet at samba.org] 
Sent: Tuesday, July 14, 2009 10:25 PM
To: Hongwei Sun
Cc: pfif at tridgell.net; cifs-protocol at samba.org; Matthias Dieter Wallnöfer; Bill Wesse
Subject: Re: [cifs-protocol] Please clarify LSA and OsVersion behaviour in MS-NRPC

On Tue, 2009-07-14 at 10:11 -0700, Hongwei Sun wrote:
> Andrew,
>   After review, we confirmed that the LsaPolicy in 
> _NETLOGON_WORKSTATION_INFO is not used in any release of Windows.  The 
> LsaPolicySize field is set to zero, and the LsaPolicy field is set to
> NULL.   I filed a request for documentation update to include this
> information.
>   Bill already responded to you in a separate e-mail regarding the behaviour of OsVersion.
>   Please let us know if you have any further questions.

Thanks.  It's good to have this clarified.

Andrew Bartlett
Andrew Bartlett
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Cisco Inc.
-------------- next part --------------
An embedded message was scrubbed...
From: Bill Wesse <billwe at microsoft.com>
Subject: RE: Please clarify LSA and OsVersion behaviour in MS-NRPC
Date: Fri, 10 Jul 2009 02:48:22 -0700
Size: 17167
URL: <http://lists.samba.org/pipermail/cifs-protocol/attachments/20090724/05da752d/attachment.mht>

More information about the cifs-protocol mailing list