USER_INFO_1008

The USER_INFO_1008 structure contains a set of bit flags defining several user network account parameters. This information level is valid only when you call the NetUserSetInfo function.

typedef struct _USER_INFO_1008 {
  DWORD    usri1008_flags;
} USER_INFO_1008, *PUSER_INFO_1008, *LPUSER_INFO_1008;

Members

usri1008_flags

Specifies a DWORD value that determines several features to associate with the user account specified in the username parameter to the NetUserSetInfo function. This member can be one or more of the following values.

Value	Meaning
UF_SCRIPT	The logon script executed. This value must be set for LAN Manager 2.0 and Windows NT/Windows 2000.
UF_ACCOUNTDISABLE	The user's account is disabled.
UF_HOMEDIR_REQUIRED	The home directory is required. This value is ignored in Windows NT/Windows 2000.
UF_PASSWD_NOTREQD	No password is required.
UF_PASSWD_CANT_CHANGE	The user cannot change the password.
UF_LOCKOUT	The account is currently locked out. You can call the NetUserSetInfo function to clear this value and unlock a previously locked account. You cannot use this value to lock a previously unlocked account.
UF_DONT_EXPIRE_PASSWD	Windows NT/2000: The password should never expire on the account.
UF_ENCRYPTED_TEXT_PASSWORD_ALLOWED	Windows 2000: The user's password is stored under reversible encryption in the Active Directory.
UF_NOT_DELEGATED	Windows 2000: Marks the account as "sensitive"; other users cannot act as delegates of this user account.
UF_SMARTCARD_REQUIRED	Windows 2000: Requires the user to log on to the user account with a smart card.
UF_USE_DES_KEY_ONLY	Windows 2000: Restrict this principal to use only Data Encryption Standard (DES) encryption types for keys.
UF_DONT_REQUIRE_PREAUTH	Windows 2000: This account does not require Kerberos preauthentication for logon.
UF_TRUSTED_FOR_DELEGATION	Windows 2000: The account is enabled for delegation. This is a security-sensitive setting; accounts with this option enabled should be tightly controlled. This setting allows a service running under the account to assume a client's identity and authenticate as that user to other remote servers on the network.

The following values describe the account type. Only one value can be set. You cannot change the account type using the NetUserSetInfo function.

Value	Meaning
UF_NORMAL_ACCOUNT	This is a default account type that represents a typical user.
UF_TEMP_DUPLICATE_ACCOUNT	This is an account for users whose primary account is in another domain. This account provides user access to this domain, but not to any domain that trusts this domain. The User Manager refers to this account type as a local user account.
UF_WORKSTATION_TRUST_ACCOUNT	This is a computer account for a Windows NT/Windows 2000 workstation or a Windows NT/Windows 2000 server that is a member of this domain.
UF_SERVER_TRUST_ACCOUNT	This is a computer account for a backup domain controller that is a member of this domain.
UF_INTERDOMAIN_TRUST_ACCOUNT	This is a permit to trust account for a domain that trusts other domains.

Requirements

  Windows NT/2000: Requires Windows NT 3.1 or later.
  Windows 95/98: Unsupported.
  Header: Declared in Lmaccess.h.

See Also

Network Management Overview, Network Management Structures, User Functions, NetUserSetInfo