#ifndef _LMAUDIT_H #define _LMAUDIT_H #if __GNUC__ >=3 #pragma GCC system_header #endif #ifdef __cplusplus extern "C" { #endif #define REVISED_AUDIT_ENTRY_STRUCT #define LOGFLAGS_FORWARD 0 #define LOGFLAGS_BACKWARD 1 #define LOGFLAGS_SEEK 2 #define ACTION_LOCKOUT 0 #define ACTION_ADMINUNLOCK 1 #define AE_GUEST 0 #define AE_USER 1 #define AE_ADMIN 2 #define AE_NORMAL 0 #define AE_USERLIMIT 0 #define AE_GENERAL 0 #define AE_ERROR 1 #define AE_SESSDIS 1 #define AE_BADPW 1 #define AE_AUTODIS 2 #define AE_UNSHARE 2 #define AE_ADMINPRIVREQD 2 #define AE_ADMINDIS 3 #define AE_NOACCESSPERM 3 #define AE_ACCRESTRICT 4 #define AE_NORMAL_CLOSE 0 #define AE_SES_CLOSE 1 #define AE_ADMIN_CLOSE 2 #define AE_LIM_UNKNOWN 0 #define AE_LIM_LOGONHOURS 1 #define AE_LIM_EXPIRED 2 #define AE_LIM_INVAL_WKSTA 3 #define AE_LIM_DISABLED 4 #define AE_LIM_DELETED 5 #define AE_MOD 0 #define AE_DELETE 1 #define AE_ADD 2 #define AE_UAS_USER 0 #define AE_UAS_GROUP 1 #define AE_UAS_MODALS 2 #define SVAUD_SERVICE 1 #define SVAUD_GOODSESSLOGON 6 #define SVAUD_BADSESSLOGON 24 #define SVAUD_SESSLOGON (SVAUD_GOODSESSLOGON|SVAUD_BADSESSLOGON) #define SVAUD_GOODNETLOGON 96 #define SVAUD_BADNETLOGON 384 #define SVAUD_NETLOGON (SVAUD_GOODNETLOGON|SVAUD_BADNETLOGON) #define SVAUD_LOGON (SVAUD_NETLOGON|SVAUD_SESSLOGON) #define SVAUD_GOODUSE 0x600 #define SVAUD_BADUSE 0x1800 #define SVAUD_USE (SVAUD_GOODUSE|SVAUD_BADUSE) #define SVAUD_USERLIST 8192 #define SVAUD_PERMISSIONS 16384 #define SVAUD_RESOURCE 32768 #define SVAUD_LOGONLIM 65536 #define AA_AUDIT_ALL 1 #define AA_A_OWNER 4 #define AA_CLOSE 8 #define AA_S_OPEN 16 #define AA_S_WRITE 32 #define AA_S_CREATE 32 #define AA_S_DELETE 64 #define AA_S_ACL 128 #define AA_S_ALL 253 #define AA_F_OPEN 256 #define AA_F_WRITE 512 #define AA_F_CREATE 512 #define AA_F_DELETE 1024 #define AA_F_ACL 2048 #define AA_F_ALL (AA_F_OPEN|AA_F_WRITE|AA_F_DELETE|AA_F_ACL) #define AA_A_OPEN 2048 #define AA_A_WRITE 4096 #define AA_A_CREATE 8192 #define AA_A_DELETE 16384 #define AA_A_ACL 32768 #define AA_A_ALL (AA_F_OPEN|AA_F_WRITE|AA_F_DELETE|AA_F_ACL) typedef struct _AUDIT_ENTRY { DWORD ae_len; DWORD ae_reserved; DWORD ae_time; DWORD ae_type; DWORD ae_data_offset; DWORD ae_data_size; } AUDIT_ENTRY,*PAUDIT_ENTRY,*LPAUDIT_ENTRY; typedef struct _HLOG { DWORD time; DWORD last_flags; DWORD offset; DWORD rec_offset; } HLOG,*PHLOG,*LPHLOG; typedef struct _AE_SRVSTATUS { DWORD ae_sv_status; } AE_SRVSTATUS,*PAE_SRVSTATUS,*LPAE_SRVSTATUS; typedef struct _AE_SESSLOGON { DWORD ae_so_compname; DWORD ae_so_username; DWORD ae_so_privilege; } AE_SESSLOGON,*PAE_SESSLOGON,*LPAE_SESSLOGON; typedef struct _AE_SESSLOGOFF { DWORD ae_sf_compname; DWORD ae_sf_username; DWORD ae_sf_reason; } AE_SESSLOGOFF,*PAE_SESSLOGOFF,*LPAE_SESSLOGOFF; typedef struct _AE_SESSPWERR { DWORD ae_sp_compname; DWORD ae_sp_username; } AE_SESSPWERR,*PAE_SESSPWERR,*LPAE_SESSPWERR; typedef struct _AE_CONNSTART { DWORD ae_ct_compname; DWORD ae_ct_username; DWORD ae_ct_netname; DWORD ae_ct_connid; } AE_CONNSTART,*PAE_CONNSTART,*LPAE_CONNSTART; typedef struct _AE_CONNSTOP { DWORD ae_cp_compname; DWORD ae_cp_username; DWORD ae_cp_netname; DWORD ae_cp_connid; DWORD ae_cp_reason; } AE_CONNSTOP,*PAE_CONNSTOP,*LPAE_CONNSTOP; typedef struct _AE_CONNREJ { DWORD ae_cr_compname; DWORD ae_cr_username; DWORD ae_cr_netname; DWORD ae_cr_reason; } AE_CONNREJ,*PAE_CONNREJ,*LPAE_CONNREJ; typedef struct _AE_RESACCESS { DWORD ae_ra_compname; DWORD ae_ra_username; DWORD ae_ra_resname; DWORD ae_ra_operation; DWORD ae_ra_returncode; DWORD ae_ra_restype; DWORD ae_ra_fileid; } AE_RESACCESS,*PAE_RESACCESS,*LPAE_RESACCESS; typedef struct _AE_RESACCESSREJ { DWORD ae_rr_compname; DWORD ae_rr_username; DWORD ae_rr_resname; DWORD ae_rr_operation; } AE_RESACCESSREJ,*PAE_RESACCESSREJ,*LPAE_RESACCESSREJ; typedef struct _AE_CLOSEFILE { DWORD ae_cf_compname; DWORD ae_cf_username; DWORD ae_cf_resname; DWORD ae_cf_fileid; DWORD ae_cf_duration; DWORD ae_cf_reason; } AE_CLOSEFILE,*PAE_CLOSEFILE,*LPAE_CLOSEFILE; typedef struct _AE_SERVICESTAT { DWORD ae_ss_compname; DWORD ae_ss_username; DWORD ae_ss_svcname; DWORD ae_ss_status; DWORD ae_ss_code; DWORD ae_ss_text; DWORD ae_ss_returnval; } AE_SERVICESTAT,*PAE_SERVICESTAT,*LPAE_SERVICESTAT; typedef struct _AE_ACLMOD { DWORD ae_am_compname; DWORD ae_am_username; DWORD ae_am_resname; DWORD ae_am_action; DWORD ae_am_datalen; } AE_ACLMOD,*PAE_ACLMOD,*LPAE_ACLMOD; typedef struct _AE_UASMOD { DWORD ae_um_compname; DWORD ae_um_username; DWORD ae_um_resname; DWORD ae_um_rectype; DWORD ae_um_action; DWORD ae_um_datalen; } AE_UASMOD,*PAE_UASMOD,*LPAE_UASMOD; typedef struct _AE_NETLOGON { DWORD ae_no_compname; DWORD ae_no_username; DWORD ae_no_privilege; DWORD ae_no_authflags; } AE_NETLOGON,*PAE_NETLOGON,*LPAE_NETLOGON; typedef struct _AE_NETLOGOFF { DWORD ae_nf_compname; DWORD ae_nf_username; DWORD ae_nf_reserved1; DWORD ae_nf_reserved2; } AE_NETLOGOFF,*PAE_NETLOGOFF,*LPAE_NETLOGOFF; typedef struct _AE_ACCLIM { DWORD ae_al_compname; DWORD ae_al_username; DWORD ae_al_resname; DWORD ae_al_limit; } AE_ACCLIM,*PAE_ACCLIM,*LPAE_ACCLIM; typedef struct _AE_LOCKOUT { DWORD ae_lk_compname; DWORD ae_lk_username; DWORD ae_lk_action; DWORD ae_lk_bad_pw_count; } AE_LOCKOUT,*PAE_LOCKOUT,*LPAE_LOCKOUT; typedef struct _AE_GENERIC { DWORD ae_ge_msgfile; DWORD ae_ge_msgnum; DWORD ae_ge_params; DWORD ae_ge_param1; DWORD ae_ge_param2; DWORD ae_ge_param3; DWORD ae_ge_param4; DWORD ae_ge_param5; DWORD ae_ge_param6; DWORD ae_ge_param7; DWORD ae_ge_param8; DWORD ae_ge_param9; } AE_GENERIC,*PAE_GENERIC,*LPAE_GENERIC; NET_API_STATUS WINAPI NetAuditClear(LPCWSTR,LPCWSTR,LPCWSTR); NET_API_STATUS WINAPI NetAuditRead(LPTSTR,LPTSTR,LPHLOG,DWORD,PDWORD,DWORD,DWORD,PBYTE*,DWORD,PDWORD,PDWORD); NET_API_STATUS WINAPI NetAuditWrite(DWORD,PBYTE,DWORD,LPTSTR,PBYTE); /* These conflict with struct typedefs, why? */ #define AE_SRVSTATUS 0 #define AE_SESSLOGON 1 #define AE_SESSLOGOFF 2 #define AE_SESSPWERR 3 #define AE_CONNSTART 4 #define AE_CONNSTOP 5 #define AE_CONNREJ 6 #define AE_RESACCESS 7 #define AE_RESACCESSREJ 8 #define AE_CLOSEFILE 9 #define AE_SERVICESTAT 11 #define AE_ACLMOD 12 #define AE_UASMOD 13 #define AE_NETLOGON 14 #define AE_NETLOGOFF 15 #define AE_NETLOGDENIED 16 #define AE_ACCLIMITEXCD 17 #define AE_RESACCESS2 18 #define AE_ACLMODFAIL 19 #define AE_LOCKOUT 20 #define AE_GENERIC_TYPE 21 #define AE_SRVSTART 0 #define AE_SRVPAUSED 1 #define AE_SRVCONT 2 #define AE_SRVSTOP 3 #ifdef __cplusplus } #endif #endif