PROSAGA码农传奇-大数据安全-枚举权限（本地安全策略）

<div class =“post-text”itemprop =“text”>
  <P>
    使用LsaEnumeratePrivileges（在ntlsa.h中定义，在WDK  -  inc / api中）：
  </p>
   <pre>
    <code>
      NTSTATUS
NTAPI
LsaEnumeratePrivileges(
    __in LSA_HANDLE PolicyHandle,
    __inout PLSA_ENUMERATION_HANDLE EnumerationContext,
    __out PVOID *Buffer,
    __in ULONG PreferedMaximumLength,
    __out PULONG CountReturned
    );

</code>
  </pre>
  <P>
    你得到的缓冲区是一个POLICY_PRIVILEGE_DEFINITION结构数组：
  </p>
   <pre>
    <code>
      typedef struct _POLICY_PRIVILEGE_DEFINITION
{
    LSA_UNICODE_STRING Name;
    LUID LocalValue;
} POLICY_PRIVILEGE_DEFINITION, *PPOLICY_PRIVILEGE_DEFINITION;

</code>
  </pre>
  <P>
    例如：
  </p>
   <pre>
    <code>
      #include <ntlsa.h>

NTSTATUS status;
LSA_HANDLE policyHandle;
LSA_ENUMERATION_HANDLE enumerationContext = 0;
PPOLICY_PRIVILEGE_DEFINITION buffer;
ULONG countReturned;
ULONG i;

LsaOpenPolicy(..., &policyHandle);

while (TRUE)
{
    status = LsaEnumeratePrivileges(policyHandle, &enumerationContext, &buffer, 256, &countReturned);

if (status == STATUS_NO_MORE_ENTRIES)
        break; // no more privileges
    if (!NT_SUCCESS(status))
        break; // error

for (i = 0; i < countReturned; i++)
    {
        // Privilege definition in buffer[i]
    }

LsaFreeMemory(buffer);
}

LsaClose(policyHandle);

</code>
  </pre>
</DIV>