Platform SDK: Network Management |
The USER_INFO_1 structure contains information about a user account, including account name, password data, privilege level, and the path to the user's home directory.
typedef struct _USER_INFO_1 { LPWSTR usri1_name; LPWSTR usri1_password; DWORD usri1_password_age; DWORD usri1_priv; LPWSTR usri1_home_dir; LPWSTR usri1_comment; DWORD usri1_flags; LPWSTR usri1_script_path; }USER_INFO_1, *PUSER_INFO_1, *LPUSER_INFO_1;
By convention, Windows NT/Windows 2000 limits the length of passwords to LM20_PWLEN characters. This convention allows LAN Manager, Windows 3.x, Windows for Workgroups 3.x, Windows 95, and Windows 98 clients to access a Windows NT/Windows 2000 server using the account.
Value | Meaning |
---|---|
USER_PRIV_GUEST | Guest |
USER_PRIV_USER | User |
USER_PRIV_ADMIN | Administrator |
Value | Meaning |
---|---|
UF_SCRIPT | The logon script executed. This value must be set for LAN Manager 2.0 and for Windows NT/Windows 2000. |
UF_ACCOUNTDISABLE | The user's account is disabled. |
UF_HOMEDIR_REQUIRED | The home directory is required. This value is ignored in Windows NT/Windows 2000. |
UF_PASSWD_NOTREQD | No password is required. |
UF_PASSWD_CANT_CHANGE | The user cannot change the password. |
UF_LOCKOUT | The account is currently locked out. You can call the NetUserSetInfo function and clear this value to unlock a previously locked account. You cannot use this value to lock a previously unlocked account. |
UF_DONT_EXPIRE_PASSWD | Windows NT/2000: The password should never expire on the account. |
UF_ENCRYPTED_TEXT_PASSWORD_ALLOWED | Windows 2000: The user's password is stored under reversible encryption in the Active Directory. |
UF_NOT_DELEGATED | Windows 2000: Marks the account as "sensitive"; other users cannot act as delegates of this user account. |
UF_SMARTCARD_REQUIRED | Windows 2000: Requires the user to log on to the user account with a smart card. |
UF_USE_DES_KEY_ONLY | Windows 2000: Restrict this principal to use only Data Encryption Standard (DES) encryption types for keys. |
UF_DONT_REQUIRE_PREAUTH | Windows 2000: This account does not require Kerberos preauthentication for logon. |
UF_TRUSTED_FOR_DELEGATION | Windows 2000: The account is enabled for delegation. This is a security-sensitive setting; accounts with this option enabled should be tightly controlled. This setting allows a service running under the account to assume a client's identity and authenticate as that user to other remote servers on the network. |
The following values describe the account type. Only one value can be set. You cannot change the account type using the NetUserSetInfo function.
Value | Meaning |
---|---|
UF_NORMAL_ACCOUNT | This is a default account type that represents a typical user. |
UF_TEMP_DUPLICATE_ACCOUNT | This is an account for users whose primary account is in another domain. This account provides user access to this domain, but not to any domain that trusts this domain. The User Manager refers to this account type as a local user account. |
UF_WORKSTATION_TRUST_ACCOUNT | This is a computer account for a Windows NT/Windows 2000 workstation or a Windows NT/Windows 2000 server that is a member of this domain. |
UF_SERVER_TRUST_ACCOUNT | This is a computer account for a backup domain controller that is a member of this domain. |
UF_INTERDOMAIN_TRUST_ACCOUNT | This is a permit to trust account for a domain that trusts other domains. |
Windows NT/2000: Requires Windows NT 3.1 or later.
Windows 95/98: Unsupported.
Header: Declared in Lmaccess.h.
Network Management Overview, Network Management Structures, User Functions, NetUserAdd, NetUserEnum, NetUserSetInfo, NetUserGetInfo