Windows / Modules / msobjs.dll
msobjs.dll
System objects
Associated Error Codes
Below lists error codes and symbolic names found for this module.
| Code | Description |
|---|---|
| 0x00000600 | Unused message ID |
| 0x00000601 | DELETE |
| 0x00000602 | READ_CONTROL |
| 0x00000603 | WRITE_DAC |
| 0x00000604 | WRITE_OWNER |
| 0x00000605 | SYNCHRONIZE |
| 0x00000606 | ACCESS_SYS_SEC |
| 0x00000607 | MAX_ALLOWED |
| 0x00000610 | Unknown specific access (bit 0) |
| 0x00000611 | Unknown specific access (bit 1) |
| 0x00000612 | Unknown specific access (bit 2) |
| 0x00000613 | Unknown specific access (bit 3) |
| 0x00000614 | Unknown specific access (bit 4) |
| 0x00000615 | Unknown specific access (bit 5) |
| 0x00000616 | Unknown specific access (bit 6) |
| 0x00000617 | Unknown specific access (bit 7) |
| 0x00000618 | Unknown specific access (bit 8) |
| 0x00000619 | Unknown specific access (bit 9) |
| 0x0000061A | Unknown specific access (bit 10) |
| 0x0000061B | Unknown specific access (bit 11) |
| 0x0000061C | Unknown specific access (bit 12) |
| 0x0000061D | Unknown specific access (bit 13) |
| 0x0000061E | Unknown specific access (bit 14) |
| 0x0000061F | Unknown specific access (bit 15) |
| 0x00000641 | Not used |
| 0x00000643 | Assign Primary Token Privilege |
| 0x00000644 | Lock Memory Privilege |
| 0x00000645 | Increase Memory Quota Privilege |
| 0x00000646 | Unsolicited Input Privilege |
| 0x00000647 | Trusted Computer Base Privilege |
| 0x00000648 | Security Privilege |
| 0x00000649 | Take Ownership Privilege |
| 0x0000064A | Load/Unload Driver Privilege |
| 0x0000064B | Profile System Privilege |
| 0x0000064C | Set System Time Privilege |
| 0x0000064D | Profile Single Process Privilege |
| 0x0000064E | Increment Base Priority Privilege |
| 0x0000064F | Create Pagefile Privilege |
| 0x00000650 | Create Permanent Object Privilege |
| 0x00000651 | Backup Privilege |
| 0x00000652 | Restore From Backup Privilege |
| 0x00000653 | Shutdown System Privilege |
| 0x00000654 | Debug Privilege |
| 0x00000655 | View or Change Audit Log Privilege |
| 0x00000656 | Change Hardware Environment Privilege |
| 0x00000657 | Change Notify (and Traverse) Privilege |
| 0x00000658 | Remotely Shut System Down Privilege |
| 0x00000700 | |
| 0x00000701 | |
| 0x00000702 | |
| 0x00000703 | Enabled |
| 0x00000704 | Disabled |
| 0x00000705 | All |
| 0x00000706 | None |
| 0x00000707 | Audit Policy query/set API Operation |
| 0x00000708 | |
| 0x00000709 | Granted by |
| 0x0000070A | Denied by |
| 0x0000070B | Denied by Integrity Policy check |
| 0x0000070C | Granted by Ownership |
| 0x0000070D | Not granted |
| 0x0000070E | Granted by NULL DACL |
| 0x0000070F | Denied by Empty DACL |
| 0x00000710 | Granted by NULL Security Descriptor |
| 0x00000711 | Unknown or unchecked |
| 0x00000712 | Not granted due to missing |
| 0x00000713 | Granted by ACE on parent folder |
| 0x00000714 | Denied by ACE on parent folder |
| 0x00000715 | Granted by Central Access Rule |
| 0x00000716 | NOT Granted by Central Access Rule |
| 0x00000717 | Granted by parent folder's Central Access Rule |
| 0x00000718 | NOT Granted by parent folder's Central Access Rule |
| 0x00000719 | Unknown Type |
| 0x0000071A | String |
| 0x0000071B | Unsigned 64-bit Integer |
| 0x0000071C | 64-bit Integer |
| 0x0000071D | FQBN |
| 0x0000071E | Blob |
| 0x0000071F | Sid |
| 0x00000720 | Boolean |
| 0x00000721 | True |
| 0x00000722 | False |
| 0x00000723 | Invalid |
| 0x00000724 | an ACE too long to display |
| 0x00000725 | a Security Descriptor too long to display |
| 0x00000726 | Not granted to AppContainers |
| 0x00000727 | ... |
| 0x00000728 | Identification |
| 0x00000729 | Impersonation |
| 0x00000730 | Delegation |
| 0x00000731 | Denied by Process Trust Label ACE |
| 0x00000732 | Yes |
| 0x00000733 | No |
| 0x00000734 | System |
| 0x00000735 | Not Available |
| 0x00000736 | Default |
| 0x00000737 | DisallowMmConfig |
| 0x00000738 | Off |
| 0x00000739 | Auto |
| 0x00000740 | Denied by Access Filter Ace |
| 0x00000750 | REG_NONE |
| 0x00000751 | REG_SZ |
| 0x00000752 | REG_EXPAND_SZ |
| 0x00000753 | REG_BINARY |
| 0x00000754 | REG_DWORD |
| 0x00000755 | REG_DWORD_BIG_ENDIAN |
| 0x00000756 | REG_LINK |
| 0x00000757 | REG_MULTI_SZ (New lines are replaced with *. A * is replaced with **) |
| 0x00000758 | REG_RESOURCE_LIST |
| 0x00000759 | REG_FULL_RESOURCE_DESCRIPTOR |
| 0x0000075A | REG_RESOURCE_REQUIREMENTS_LIST |
| 0x0000075B | REG_QWORD |
| 0x00000770 | New registry value created |
| 0x00000771 | Existing registry value modified |
| 0x00000772 | Registry value deleted |
| 0x00000780 | Sunday |
| 0x00000781 | Monday |
| 0x00000782 | Tuesday |
| 0x00000783 | Wednesday |
| 0x00000784 | Thursday |
| 0x00000785 | Friday |
| 0x00000786 | Saturday |
| 0x00000790 | TokenElevationTypeDefault (1) |
| 0x00000791 | TokenElevationTypeFull (2) |
| 0x00000792 | TokenElevationTypeLimited (3) |
| 0x00000800 | Account Enabled |
| 0x00000801 | 'Home Directory Required' - Disabled |
| 0x00000802 | 'Password Not Required' - Disabled |
| 0x00000803 | 'Temp Duplicate Account' - Disabled |
| 0x00000804 | 'Normal Account' - Disabled |
| 0x00000805 | 'MNS Logon Account' - Disabled |
| 0x00000806 | 'Interdomain Trust Account' - Disabled |
| 0x00000807 | 'Workstation Trust Account' - Disabled |
| 0x00000808 | 'Server Trust Account' - Disabled |
| 0x00000809 | 'Don't Expire Password' - Disabled |
| 0x0000080A | Account Unlocked |
| 0x0000080B | 'Encrypted Text Password Allowed' - Disabled |
| 0x0000080C | 'Smartcard Required' - Disabled |
| 0x0000080D | 'Trusted For Delegation' - Disabled |
| 0x0000080E | 'Not Delegated' - Disabled |
| 0x0000080F | 'Use DES Key Only' - Disabled |
| 0x00000810 | 'Don't Require Preauth' - Disabled |
| 0x00000811 | 'Password Expired' - Disabled |
| 0x00000812 | 'Trusted To Authenticate For Delegation' - Disabled |
| 0x00000813 | 'Exclude Authorization Information' - Disabled |
| 0x00000814 | 'Undefined UserAccountControl Bit 20' - Disabled |
| 0x00000815 | 'Protect Kerberos Service Tickets with AES Keys' - Disabled |
| 0x00000816 | 'Undefined UserAccountControl Bit 22' - Disabled |
| 0x00000817 | 'Undefined UserAccountControl Bit 23' - Disabled |
| 0x00000818 | 'Undefined UserAccountControl Bit 24' - Disabled |
| 0x00000819 | 'Undefined UserAccountControl Bit 25' - Disabled |
| 0x0000081A | 'Undefined UserAccountControl Bit 26' - Disabled |
| 0x0000081B | 'Undefined UserAccountControl Bit 27' - Disabled |
| 0x0000081C | 'Undefined UserAccountControl Bit 28' - Disabled |
| 0x0000081D | 'Undefined UserAccountControl Bit 29' - Disabled |
| 0x0000081E | 'Undefined UserAccountControl Bit 30' - Disabled |
| 0x0000081F | 'Undefined UserAccountControl Bit 31' - Disabled |
| 0x00000820 | Account Disabled |
| 0x00000821 | 'Home Directory Required' - Enabled |
| 0x00000822 | 'Password Not Required' - Enabled |
| 0x00000823 | 'Temp Duplicate Account' - Enabled |
| 0x00000824 | 'Normal Account' - Enabled |
| 0x00000825 | 'MNS Logon Account' - Enabled |
| 0x00000826 | 'Interdomain Trust Account' - Enabled |
| 0x00000827 | 'Workstation Trust Account' - Enabled |
| 0x00000828 | 'Server Trust Account' - Enabled |
| 0x00000829 | 'Don't Expire Password' - Enabled |
| 0x0000082A | Account Locked |
| 0x0000082B | 'Encrypted Text Password Allowed' - Enabled |
| 0x0000082C | 'Smartcard Required' - Enabled |
| 0x0000082D | 'Trusted For Delegation' - Enabled |
| 0x0000082E | 'Not Delegated' - Enabled |
| 0x0000082F | 'Use DES Key Only' - Enabled |
| 0x00000830 | 'Don't Require Preauth' - Enabled |
| 0x00000831 | 'Password Expired' - Enabled |
| 0x00000832 | 'Trusted To Authenticate For Delegation' - Enabled |
| 0x00000833 | 'Exclude Authorization Information' - Enabled |
| 0x00000834 | 'Undefined UserAccountControl Bit 20' - Enabled |
| 0x00000835 | 'Protect Kerberos Service Tickets with AES Keys' - Enabled |
| 0x00000836 | 'Undefined UserAccountControl Bit 22' - Enabled |
| 0x00000837 | 'Undefined UserAccountControl Bit 23' - Enabled |
| 0x00000838 | 'Undefined UserAccountControl Bit 24' - Enabled |
| 0x00000839 | 'Undefined UserAccountControl Bit 25' - Enabled |
| 0x0000083A | 'Undefined UserAccountControl Bit 26' - Enabled |
| 0x0000083B | 'Undefined UserAccountControl Bit 27' - Enabled |
| 0x0000083C | 'Undefined UserAccountControl Bit 28' - Enabled |
| 0x0000083D | 'Undefined UserAccountControl Bit 29' - Enabled |
| 0x0000083E | 'Undefined UserAccountControl Bit 30' - Enabled |
| 0x0000083F | 'Undefined UserAccountControl Bit 31' - Enabled |
| 0x00000900 | An Error occured during Logon. |
| 0x00000901 | The specified user account has expired. |
| 0x00000902 | The NetLogon component is not active. |
| 0x00000903 | Account locked out. |
| 0x00000904 | The user has not been granted the requested logon type at this machine. |
| 0x00000905 | The specified account's password has expired. |
| 0x00000906 | Account currently disabled. |
| 0x00000907 | Account logon time restriction violation. |
| 0x00000908 | User not allowed to logon at this computer. |
| 0x00000909 | Unknown user name or bad password. |
| 0x0000090A | Domain sid inconsistent. |
| 0x0000090B | Smartcard logon is required and was not used. |
| 0x00000980 | Not Available. |
| 0x00000984 | Random number generator failure. |
| 0x00000985 | Random number generation failed FIPS-140 pre-hash check. |
| 0x00000986 | Failed to zero secret data. |
| 0x00000987 | Key failed pair wise consistency check. |
| 0x00000990 | Failed to unprotect persistent cryptographic key. |
| 0x00000991 | Key export checks failed. |
| 0x00000992 | Validation of public key failed. |
| 0x00000993 | Signature verification failed. |
| 0x00000998 | Open key file. |
| 0x00000999 | Delete key file. |
| 0x0000099A | Read persisted key from file. |
| 0x0000099B | Write persisted key to file. |
| 0x000009A0 | Export of persistent cryptographic key. |
| 0x000009A1 | Import of persistent cryptographic key. |
| 0x000009B0 | Open Key. |
| 0x000009B1 | Create Key. |
| 0x000009B2 | Delete Key. |
| 0x000009B3 | Encrypt. |
| 0x000009B4 | Decrypt. |
| 0x000009B5 | Sign hash. |
| 0x000009B6 | Secret agreement. |
| 0x000009B7 | Domain settings |
| 0x000009B8 | Local settings |
| 0x000009B9 | Add provider. |
| 0x000009BA | Remove provider. |
| 0x000009BB | Add context. |
| 0x000009BC | Remove context. |
| 0x000009BD | Add function. |
| 0x000009BE | Remove function. |
| 0x000009BF | Add function provider. |
| 0x000009C0 | Remove function provider. |
| 0x000009C1 | Add function property. |
| 0x000009C2 | Remove function property. |
| 0x000009C3 | Machine key. |
| 0x000009C4 | User key. |
| 0x000009C5 | Key Derivation. |
| 0x000009C6 | Claim Creation. |
| 0x000009C7 | Claim Verification. |
| 0x00001100 | Device Access Bit 0 |
| 0x00001101 | Device Access Bit 1 |
| 0x00001102 | Device Access Bit 2 |
| 0x00001103 | Device Access Bit 3 |
| 0x00001104 | Device Access Bit 4 |
| 0x00001105 | Device Access Bit 5 |
| 0x00001106 | Device Access Bit 6 |
| 0x00001107 | Device Access Bit 7 |
| 0x00001108 | Device Access Bit 8 |
| 0x00001109 | Undefined Access (no effect) Bit 9 |
| 0x0000110A | Undefined Access (no effect) Bit 10 |
| 0x0000110B | Undefined Access (no effect) Bit 11 |
| 0x0000110C | Undefined Access (no effect) Bit 12 |
| 0x0000110D | Undefined Access (no effect) Bit 13 |
| 0x0000110E | Undefined Access (no effect) Bit 14 |
| 0x0000110F | Undefined Access (no effect) Bit 15 |
| 0x00001110 | Query directory |
| 0x00001111 | Traverse |
| 0x00001112 | Create object in directory |
| 0x00001113 | Create sub-directory |
| 0x00001114 | Undefined Access (no effect) Bit 4 |
| 0x00001115 | Undefined Access (no effect) Bit 5 |
| 0x00001116 | Undefined Access (no effect) Bit 6 |
| 0x00001117 | Undefined Access (no effect) Bit 7 |
| 0x00001118 | Undefined Access (no effect) Bit 8 |
| 0x00001119 | Undefined Access (no effect) Bit 9 |
| 0x0000111A | Undefined Access (no effect) Bit 10 |
| 0x0000111B | Undefined Access (no effect) Bit 11 |
| 0x0000111C | Undefined Access (no effect) Bit 12 |
| 0x0000111D | Undefined Access (no effect) Bit 13 |
| 0x0000111E | Undefined Access (no effect) Bit 14 |
| 0x0000111F | Undefined Access (no effect) Bit 15 |
| 0x00001120 | Query event state |
| 0x00001121 | Modify event state |
| 0x00001122 | Undefined Access (no effect) Bit 2 |
| 0x00001123 | Undefined Access (no effect) Bit 3 |
| 0x00001124 | Undefined Access (no effect) Bit 4 |
| 0x00001125 | Undefined Access (no effect) Bit 5 |
| 0x00001126 | Undefined Access (no effect) Bit 6 |
| 0x00001127 | Undefined Access (no effect) Bit 7 |
| 0x00001128 | Undefined Access (no effect) Bit 8 |
| 0x00001129 | Undefined Access (no effect) Bit 9 |
| 0x0000112A | Undefined Access (no effect) Bit 10 |
| 0x0000112B | Undefined Access (no effect) Bit 11 |
| 0x0000112C | Undefined Access (no effect) Bit 12 |
| 0x0000112D | Undefined Access (no effect) Bit 13 |
| 0x0000112E | Undefined Access (no effect) Bit 14 |
| 0x0000112F | Undefined Access (no effect) Bit 15 |
| 0x00001140 | ReadData (or ListDirectory) |
| 0x00001141 | WriteData (or AddFile) |
| 0x00001142 | AppendData (or AddSubdirectory or CreatePipeInstance) |
| 0x00001143 | ReadEA |
| 0x00001144 | WriteEA |
| 0x00001145 | Execute/Traverse |
| 0x00001146 | DeleteChild |
| 0x00001147 | ReadAttributes |
| 0x00001148 | WriteAttributes |
| 0x00001149 | Undefined Access (no effect) Bit 9 |
| 0x0000114A | Undefined Access (no effect) Bit 10 |
| 0x0000114B | Undefined Access (no effect) Bit 11 |
| 0x0000114C | Undefined Access (no effect) Bit 12 |
| 0x0000114D | Undefined Access (no effect) Bit 13 |
| 0x0000114E | Undefined Access (no effect) Bit 14 |
| 0x0000114F | Undefined Access (no effect) Bit 15 |
| 0x00001150 | Query key value |
| 0x00001151 | Set key value |
| 0x00001152 | Create sub-key |
| 0x00001153 | Enumerate sub-keys |
| 0x00001154 | Notify about changes to keys |
| 0x00001155 | Create Link |
| 0x00001156 | Undefined Access (no effect) Bit 6 |
| 0x00001157 | Undefined Access (no effect) Bit 7 |
| 0x00001158 | Enable 64(or 32) bit application to open 64 bit key |
| 0x00001159 | Enable 64(or 32) bit application to open 32 bit key |
| 0x0000115A | Undefined Access (no effect) Bit 10 |
| 0x0000115B | Undefined Access (no effect) Bit 11 |
| 0x0000115C | Undefined Access (no effect) Bit 12 |
| 0x0000115D | Undefined Access (no effect) Bit 13 |
| 0x0000115E | Undefined Access (no effect) Bit 14 |
| 0x0000115F | Undefined Access (no effect) Bit 15 |
| 0x00001160 | Query mutant state |
| 0x00001161 | Undefined Access (no effect) Bit 1 |
| 0x00001162 | Undefined Access (no effect) Bit 2 |
| 0x00001163 | Undefined Access (no effect) Bit 3 |
| 0x00001164 | Undefined Access (no effect) Bit 4 |
| 0x00001165 | Undefined Access (no effect) Bit 5 |
| 0x00001166 | Undefined Access (no effect) Bit 6 |
| 0x00001167 | Undefined Access (no effect) Bit 7 |
| 0x00001168 | Undefined Access (no effect) Bit 8 |
| 0x00001169 | Undefined Access (no effect) Bit 9 |
| 0x0000116A | Undefined Access (no effect) Bit 10 |
| 0x0000116B | Undefined Access (no effect) Bit 11 |
| 0x0000116C | Undefined Access (no effect) Bit 12 |
| 0x0000116D | Undefined Access (no effect) Bit 13 |
| 0x0000116E | Undefined Access (no effect) Bit 14 |
| 0x0000116F | Undefined Access (no effect) Bit 15 |
| 0x00001170 | Communicate using port |
| 0x00001171 | Undefined Access (no effect) Bit 1 |
| 0x00001172 | Undefined Access (no effect) Bit 2 |
| 0x00001173 | Undefined Access (no effect) Bit 3 |
| 0x00001174 | Undefined Access (no effect) Bit 4 |
| 0x00001175 | Undefined Access (no effect) Bit 5 |
| 0x00001176 | Undefined Access (no effect) Bit 6 |
| 0x00001177 | Undefined Access (no effect) Bit 7 |
| 0x00001178 | Undefined Access (no effect) Bit 8 |
| 0x00001179 | Undefined Access (no effect) Bit 9 |
| 0x0000117A | Undefined Access (no effect) Bit 10 |
| 0x0000117B | Undefined Access (no effect) Bit 11 |
| 0x0000117C | Undefined Access (no effect) Bit 12 |
| 0x0000117D | Undefined Access (no effect) Bit 13 |
| 0x0000117E | Undefined Access (no effect) Bit 14 |
| 0x0000117F | Undefined Access (no effect) Bit 15 |
| 0x00001180 | Force process termination |
| 0x00001181 | Create new thread in process |
| 0x00001182 | Set process session ID |
| 0x00001183 | Perform virtual memory operation |
| 0x00001184 | Read from process memory |
| 0x00001185 | Write to process memory |
| 0x00001186 | Duplicate handle into or out of process |
| 0x00001187 | Create a subprocess of process |
| 0x00001188 | Set process quotas |
| 0x00001189 | Set process information |
| 0x0000118A | Query process information |
| 0x0000118B | Set process termination port |
| 0x0000118C | Undefined Access (no effect) Bit 12 |
| 0x0000118D | Undefined Access (no effect) Bit 13 |
| 0x0000118E | Undefined Access (no effect) Bit 14 |
| 0x0000118F | Undefined Access (no effect) Bit 15 |
| 0x00001190 | Control profile |
| 0x00001191 | Undefined Access (no effect) Bit 1 |
| 0x00001192 | Undefined Access (no effect) Bit 2 |
| 0x00001193 | Undefined Access (no effect) Bit 3 |
| 0x00001194 | Undefined Access (no effect) Bit 4 |
| 0x00001195 | Undefined Access (no effect) Bit 5 |
| 0x00001196 | Undefined Access (no effect) Bit 6 |
| 0x00001197 | Undefined Access (no effect) Bit 7 |
| 0x00001198 | Undefined Access (no effect) Bit 8 |
| 0x00001199 | Undefined Access (no effect) Bit 9 |
| 0x0000119A | Undefined Access (no effect) Bit 10 |
| 0x0000119B | Undefined Access (no effect) Bit 11 |
| 0x0000119C | Undefined Access (no effect) Bit 12 |
| 0x0000119D | Undefined Access (no effect) Bit 13 |
| 0x0000119E | Undefined Access (no effect) Bit 14 |
| 0x0000119F | Undefined Access (no effect) Bit 15 |
| 0x000011A0 | Query section state |
| 0x000011A1 | Map section for write |
| 0x000011A2 | Map section for read |
| 0x000011A3 | Map section for execute |
| 0x000011A4 | Extend size |
| 0x000011A5 | Undefined Access (no effect) Bit 5 |
| 0x000011A6 | Undefined Access (no effect) Bit 6 |
| 0x000011A7 | Undefined Access (no effect) Bit 7 |
| 0x000011A8 | Undefined Access (no effect) Bit 8 |
| 0x000011A9 | Undefined Access (no effect) Bit 9 |
| 0x000011AA | Undefined Access (no effect) Bit 10 |
| 0x000011AB | Undefined Access (no effect) Bit 11 |
| 0x000011AC | Undefined Access (no effect) Bit 12 |
| 0x000011AD | Undefined Access (no effect) Bit 13 |
| 0x000011AE | Undefined Access (no effect) Bit 14 |
| 0x000011AF | Undefined Access (no effect) Bit 15 |
| 0x000011B0 | Query semaphore state |
| 0x000011B1 | Modify semaphore state |
| 0x000011B2 | Undefined Access (no effect) Bit 2 |
| 0x000011B3 | Undefined Access (no effect) Bit 3 |
| 0x000011B4 | Undefined Access (no effect) Bit 4 |
| 0x000011B5 | Undefined Access (no effect) Bit 5 |
| 0x000011B6 | Undefined Access (no effect) Bit 6 |
| 0x000011B7 | Undefined Access (no effect) Bit 7 |
| 0x000011B8 | Undefined Access (no effect) Bit 8 |
| 0x000011B9 | Undefined Access (no effect) Bit 9 |
| 0x000011BA | Undefined Access (no effect) Bit 10 |
| 0x000011BB | Undefined Access (no effect) Bit 11 |
| 0x000011BC | Undefined Access (no effect) Bit 12 |
| 0x000011BD | Undefined Access (no effect) Bit 13 |
| 0x000011BE | Undefined Access (no effect) Bit 14 |
| 0x000011BF | Undefined Access (no effect) Bit 15 |
| 0x000011C0 | Use symbolic link |
| 0x000011C1 | Undefined Access (no effect) Bit 1 |
| 0x000011C2 | Undefined Access (no effect) Bit 2 |
| 0x000011C3 | Undefined Access (no effect) Bit 3 |
| 0x000011C4 | Undefined Access (no effect) Bit 4 |
| 0x000011C5 | Undefined Access (no effect) Bit 5 |
| 0x000011C6 | Undefined Access (no effect) Bit 6 |
| 0x000011C7 | Undefined Access (no effect) Bit 7 |
| 0x000011C8 | Undefined Access (no effect) Bit 8 |
| 0x000011C9 | Undefined Access (no effect) Bit 9 |
| 0x000011CA | Undefined Access (no effect) Bit 10 |
| 0x000011CB | Undefined Access (no effect) Bit 11 |
| 0x000011CC | Undefined Access (no effect) Bit 12 |
| 0x000011CD | Undefined Access (no effect) Bit 13 |
| 0x000011CE | Undefined Access (no effect) Bit 14 |
| 0x000011CF | Undefined Access (no effect) Bit 15 |
| 0x000011D0 | Force thread termination |
| 0x000011D1 | Suspend or resume thread |
| 0x000011D2 | Send an alert to thread |
| 0x000011D3 | Get thread context |
| 0x000011D4 | Set thread context |
| 0x000011D5 | Set thread information |
| 0x000011D6 | Query thread information |
| 0x000011D7 | Assign a token to the thread |
| 0x000011D8 | Cause thread to directly impersonate another thread |
| 0x000011D9 | Directly impersonate this thread |
| 0x000011DA | Undefined Access (no effect) Bit 10 |
| 0x000011DB | Undefined Access (no effect) Bit 11 |
| 0x000011DC | Undefined Access (no effect) Bit 12 |
| 0x000011DD | Undefined Access (no effect) Bit 13 |
| 0x000011DE | Undefined Access (no effect) Bit 14 |
| 0x000011DF | Undefined Access (no effect) Bit 15 |
| 0x000011E0 | Query timer state |
| 0x000011E1 | Modify timer state |
| 0x000011E2 | Undefined Access (no effect) Bit 2 |
| 0x000011E3 | Undefined Access (no effect) Bit 3 |
| 0x000011E4 | Undefined Access (no effect) Bit 4 |
| 0x000011E5 | Undefined Access (no effect) Bit 5 |
| 0x000011E6 | Undefined Access (no effect) Bit 6 |
| 0x000011E8 | Undefined Access (no effect) Bit 8 |
| 0x000011E9 | Undefined Access (no effect) Bit 9 |
| 0x000011EA | Undefined Access (no effect) Bit 10 |
| 0x000011EB | Undefined Access (no effect) Bit 11 |
| 0x000011EC | Undefined Access (no effect) Bit 12 |
| 0x000011ED | Undefined Access (no effect) Bit 13 |
| 0x000011EE | Undefined Access (no effect) Bit 14 |
| 0x000011EF | Undefined Access (no effect) Bit 15 |
| 0x000011F0 | AssignAsPrimary |
| 0x000011F1 | Duplicate |
| 0x000011F2 | Impersonate |
| 0x000011F3 | Query |
| 0x000011F4 | QuerySource |
| 0x000011F5 | AdjustPrivileges |
| 0x000011F6 | AdjustGroups |
| 0x000011F7 | AdjustDefaultDacl |
| 0x000011F8 | AdjustSessionID |
| 0x000011F9 | Undefined Access (no effect) Bit 9 |
| 0x000011FA | Undefined Access (no effect) Bit 10 |
| 0x000011FB | Undefined Access (no effect) Bit 11 |
| 0x000011FC | Undefined Access (no effect) Bit 12 |
| 0x000011FD | Undefined Access (no effect) Bit 13 |
| 0x000011FE | Undefined Access (no effect) Bit 14 |
| 0x000011FF | Undefined Access (no effect) Bit 15 |
| 0x00001200 | Create instance of object type |
| 0x00001201 | Undefined Access (no effect) Bit 1 |
| 0x00001202 | Undefined Access (no effect) Bit 2 |
| 0x00001203 | Undefined Access (no effect) Bit 3 |
| 0x00001204 | Undefined Access (no effect) Bit 4 |
| 0x00001205 | Undefined Access (no effect) Bit 5 |
| 0x00001206 | Undefined Access (no effect) Bit 6 |
| 0x00001207 | Undefined Access (no effect) Bit 7 |
| 0x00001208 | Undefined Access (no effect) Bit 8 |
| 0x00001209 | Undefined Access (no effect) Bit 9 |
| 0x0000120A | Undefined Access (no effect) Bit 10 |
| 0x0000120B | Undefined Access (no effect) Bit 11 |
| 0x0000120C | Undefined Access (no effect) Bit 12 |
| 0x0000120D | Undefined Access (no effect) Bit 13 |
| 0x0000120E | Undefined Access (no effect) Bit 14 |
| 0x0000120F | Undefined Access (no effect) Bit 15 |
| 0x00001300 | Query State |
| 0x00001301 | Modify State |
| 0x00001400 | Channel read message |
| 0x00001401 | Channel write message |
| 0x00001402 | Channel query information |
| 0x00001403 | Channel set information |
| 0x00001404 | Undefined Access (no effect) Bit 4 |
| 0x00001405 | Undefined Access (no effect) Bit 5 |
| 0x00001406 | Undefined Access (no effect) Bit 6 |
| 0x00001407 | Undefined Access (no effect) Bit 7 |
| 0x00001408 | Undefined Access (no effect) Bit 8 |
| 0x00001409 | Undefined Access (no effect) Bit 9 |
| 0x0000140A | Undefined Access (no effect) Bit 10 |
| 0x0000140B | Undefined Access (no effect) Bit 11 |
| 0x0000140C | Undefined Access (no effect) Bit 12 |
| 0x0000140D | Undefined Access (no effect) Bit 13 |
| 0x0000140E | Undefined Access (no effect) Bit 14 |
| 0x0000140F | Undefined Access (no effect) Bit 15 |
| 0x00001410 | Assign process |
| 0x00001411 | Set Attributes |
| 0x00001412 | Query Attributes |
| 0x00001413 | Terminate Job |
| 0x00001414 | Set Security Attributes |
| 0x00001415 | Undefined Access (no effect) Bit 5 |
| 0x00001416 | Undefined Access (no effect) Bit 6 |
| 0x00001417 | Undefined Access (no effect) Bit 7 |
| 0x00001418 | Undefined Access (no effect) Bit 8 |
| 0x00001419 | Undefined Access (no effect) Bit 9 |
| 0x0000141A | Undefined Access (no effect) Bit 10 |
| 0x0000141B | Undefined Access (no effect) Bit 11 |
| 0x0000141C | Undefined Access (no effect) Bit 12 |
| 0x0000141D | Undefined Access (no effect) Bit 13 |
| 0x0000141E | Undefined Access (no effect) Bit 14 |
| 0x0000141F | Undefined Access (no effect) Bit 15 |
| 0x00001500 | ConnectToServer |
| 0x00001501 | ShutdownServer |
| 0x00001502 | InitializeServer |
| 0x00001503 | CreateDomain |
| 0x00001504 | EnumerateDomains |
| 0x00001505 | LookupDomain |
| 0x00001506 | Undefined Access (no effect) Bit 6 |
| 0x00001507 | Undefined Access (no effect) Bit 7 |
| 0x00001508 | Undefined Access (no effect) Bit 8 |
| 0x00001509 | Undefined Access (no effect) Bit 9 |
| 0x0000150A | Undefined Access (no effect) Bit 10 |
| 0x0000150B | Undefined Access (no effect) Bit 11 |
| 0x0000150C | Undefined Access (no effect) Bit 12 |
| 0x0000150D | Undefined Access (no effect) Bit 13 |
| 0x0000150E | Undefined Access (no effect) Bit 14 |
| 0x0000150F | Undefined Access (no effect) Bit 15 |
| 0x00001510 | ReadPasswordParameters |
| 0x00001511 | WritePasswordParameters |
| 0x00001512 | ReadOtherParameters |
| 0x00001513 | WriteOtherParameters |
| 0x00001514 | CreateUser |
| 0x00001515 | CreateGlobalGroup |
| 0x00001516 | CreateLocalGroup |
| 0x00001517 | GetLocalGroupMembership |
| 0x00001518 | ListAccounts |
| 0x00001519 | LookupIDs |
| 0x0000151A | AdministerServer |
| 0x0000151B | Undefined Access (no effect) Bit 11 |
| 0x0000151C | Undefined Access (no effect) Bit 12 |
| 0x0000151D | Undefined Access (no effect) Bit 13 |
| 0x0000151E | Undefined Access (no effect) Bit 14 |
| 0x0000151F | Undefined Access (no effect) Bit 15 |
| 0x00001520 | ReadInformation |
| 0x00001521 | WriteAccount |
| 0x00001522 | AddMember |
| 0x00001523 | RemoveMember |
| 0x00001524 | ListMembers |
| 0x00001525 | Undefined Access (no effect) Bit 5 |
| 0x00001526 | Undefined Access (no effect) Bit 6 |
| 0x00001527 | Undefined Access (no effect) Bit 7 |
| 0x00001528 | Undefined Access (no effect) Bit 8 |
| 0x00001529 | Undefined Access (no effect) Bit 9 |
| 0x0000152A | Undefined Access (no effect) Bit 10 |
| 0x0000152B | Undefined Access (no effect) Bit 11 |
| 0x0000152C | Undefined Access (no effect) Bit 12 |
| 0x0000152D | Undefined Access (no effect) Bit 13 |
| 0x0000152E | Undefined Access (no effect) Bit 14 |
| 0x0000152F | Undefined Access (no effect) Bit 15 |
| 0x00001530 | AddMember |
| 0x00001531 | RemoveMember |
| 0x00001532 | ListMembers |
| 0x00001533 | ReadInformation |
| 0x00001534 | WriteAccount |
| 0x00001535 | Undefined Access (no effect) Bit 5 |
| 0x00001536 | Undefined Access (no effect) Bit 6 |
| 0x00001537 | Undefined Access (no effect) Bit 7 |
| 0x00001538 | Undefined Access (no effect) Bit 8 |
| 0x00001539 | Undefined Access (no effect) Bit 9 |
| 0x0000153A | Undefined Access (no effect) Bit 10 |
| 0x0000153B | Undefined Access (no effect) Bit 11 |
| 0x0000153C | Undefined Access (no effect) Bit 12 |
| 0x0000153D | Undefined Access (no effect) Bit 13 |
| 0x0000153E | Undefined Access (no effect) Bit 14 |
| 0x0000153F | Undefined Access (no effect) Bit 15 |
| 0x00001540 | ReadGeneralInformation |
| 0x00001541 | ReadPreferences |
| 0x00001542 | WritePreferences |
| 0x00001543 | ReadLogon |
| 0x00001544 | ReadAccount |
| 0x00001545 | WriteAccount |
| 0x00001546 | ChangePassword (with knowledge of old password) |
| 0x00001547 | SetPassword (without knowledge of old password) |
| 0x00001548 | ListGroups |
| 0x00001549 | ReadGroupMembership |
| 0x0000154A | ChangeGroupMembership |
| 0x0000154B | Undefined Access (no effect) Bit 11 |
| 0x0000154C | Undefined Access (no effect) Bit 12 |
| 0x0000154D | Undefined Access (no effect) Bit 13 |
| 0x0000154E | Undefined Access (no effect) Bit 14 |
| 0x0000154F | Undefined Access (no effect) Bit 15 |
| 0x00001600 | View non-sensitive policy information |
| 0x00001601 | View system audit requirements |
| 0x00001602 | Get sensitive policy information |
| 0x00001603 | Modify domain trust relationships |
| 0x00001604 | Create special accounts (for assignment of user rights) |
| 0x00001605 | Create a secret object |
| 0x00001606 | Create a privilege |
| 0x00001607 | Set default quota limits |
| 0x00001608 | Change system audit requirements |
| 0x00001609 | Administer audit log attributes |
| 0x0000160A | Enable/Disable LSA |
| 0x0000160B | Lookup Names/SIDs |
| 0x00001610 | Change secret value |
| 0x00001611 | Query secret value |
| 0x00001612 | Undefined Access (no effect) Bit 2 |
| 0x00001613 | Undefined Access (no effect) Bit 3 |
| 0x00001614 | Undefined Access (no effect) Bit 4 |
| 0x00001615 | Undefined Access (no effect) Bit 5 |
| 0x00001616 | Undefined Access (no effect) Bit 6 |
| 0x00001617 | Undefined Access (no effect) Bit 7 |
| 0x00001618 | Undefined Access (no effect) Bit 8 |
| 0x00001619 | Undefined Access (no effect) Bit 9 |
| 0x0000161A | Undefined Access (no effect) Bit 10 |
| 0x0000161B | Undefined Access (no effect) Bit 11 |
| 0x0000161C | Undefined Access (no effect) Bit 12 |
| 0x0000161D | Undefined Access (no effect) Bit 13 |
| 0x0000161E | Undefined Access (no effect) Bit 14 |
| 0x0000161F | Undefined Access (no effect) Bit 15 |
| 0x00001620 | Query trusted domain name/SID |
| 0x00001621 | Retrieve the controllers in the trusted domain |
| 0x00001622 | Change the controllers in the trusted domain |
| 0x00001623 | Query the Posix ID offset assigned to the trusted domain |
| 0x00001624 | Change the Posix ID offset assigned to the trusted domain |
| 0x00001625 | Undefined Access (no effect) Bit 5 |
| 0x00001626 | Undefined Access (no effect) Bit 6 |
| 0x00001627 | Undefined Access (no effect) Bit 7 |
| 0x00001628 | Undefined Access (no effect) Bit 8 |
| 0x00001629 | Undefined Access (no effect) Bit 9 |
| 0x0000162A | Undefined Access (no effect) Bit 10 |
| 0x0000162B | Undefined Access (no effect) Bit 11 |
| 0x0000162C | Undefined Access (no effect) Bit 12 |
| 0x0000162D | Undefined Access (no effect) Bit 13 |
| 0x0000162E | Undefined Access (no effect) Bit 14 |
| 0x0000162F | Undefined Access (no effect) Bit 15 |
| 0x00001630 | Query account information |
| 0x00001631 | Change privileges assigned to account |
| 0x00001632 | Change quotas assigned to account |
| 0x00001633 | Change logon capabilities assigned to account |
| 0x00001634 | Change the Posix ID offset assigned to the accounted domain |
| 0x00001635 | Undefined Access (no effect) Bit 5 |
| 0x00001636 | Undefined Access (no effect) Bit 6 |
| 0x00001637 | Undefined Access (no effect) Bit 7 |
| 0x00001638 | Undefined Access (no effect) Bit 8 |
| 0x00001639 | Undefined Access (no effect) Bit 9 |
| 0x0000163A | Undefined Access (no effect) Bit 10 |
| 0x0000163B | Undefined Access (no effect) Bit 11 |
| 0x0000163C | Undefined Access (no effect) Bit 12 |
| 0x0000163D | Undefined Access (no effect) Bit 13 |
| 0x0000163E | Undefined Access (no effect) Bit 14 |
| 0x0000163F | Undefined Access (no effect) Bit 15 |
| 0x00001640 | KeyedEvent Wait |
| 0x00001641 | KeyedEvent Wake |
| 0x00001642 | Undefined Access (no effect) Bit 2 |
| 0x00001643 | Undefined Access (no effect) Bit 3 |
| 0x00001644 | Undefined Access (no effect) Bit 4 |
| 0x00001645 | Undefined Access (no effect) Bit 5 |
| 0x00001646 | Undefined Access (no effect) Bit 6 |
| 0x00001647 | Undefined Access (no effect) Bit 7 |
| 0x00001648 | Undefined Access (no effect) Bit 8 |
| 0x00001649 | Undefined Access (no effect) Bit 9 |
| 0x0000164A | Undefined Access (no effect) Bit 10 |
| 0x0000164B | Undefined Access (no effect) Bit 11 |
| 0x0000164C | Undefined Access (no effect) Bit 12 |
| 0x0000164D | Undefined Access (no effect) Bit 13 |
| 0x0000164E | Undefined Access (no effect) Bit 14 |
| 0x0000164F | Undefined Access (no effect) Bit 15 |
| 0x00001A00 | Enumerate desktops |
| 0x00001A01 | Read attributes |
| 0x00001A02 | Access Clipboard |
| 0x00001A03 | Create desktop |
| 0x00001A04 | Write attributes |
| 0x00001A05 | Access global atoms |
| 0x00001A06 | Exit windows |
| 0x00001A07 | Unused Access Flag |
| 0x00001A08 | Include this windowstation in enumerations |
| 0x00001A09 | Read screen |
| 0x00001A10 | Read Objects |
| 0x00001A11 | Create window |
| 0x00001A12 | Create menu |
| 0x00001A13 | Hook control |
| 0x00001A14 | Journal (record) |
| 0x00001A15 | Journal (playback) |
| 0x00001A16 | Include this desktop in enumerations |
| 0x00001A17 | Write objects |
| 0x00001A18 | Switch to this desktop |
| 0x00001B00 | Administer print server |
| 0x00001B01 | Enumerate printers |
| 0x00001B12 | Full Control |
| 0x00001B13 | |
| 0x00001B24 | Administer Document |
| 0x00001C00 | Connect to service controller |
| 0x00001C01 | Create a new service |
| 0x00001C02 | Enumerate services |
| 0x00001C03 | Lock service database for exclusive access |
| 0x00001C04 | Query service database lock state |
| 0x00001C05 | Set last-known-good state of service database |
| 0x00001C10 | Query service configuration information |
| 0x00001C11 | Set service configuration information |
| 0x00001C12 | Query status of service |
| 0x00001C13 | Enumerate dependencies of service |
| 0x00001C14 | Start the service |
| 0x00001C15 | Stop the service |
| 0x00001C16 | Pause or continue the service |
| 0x00001C17 | Query information from service |
| 0x00001C18 | Issue service-specific control commands |
| 0x00001D00 | DDE Share Read |
| 0x00001D01 | DDE Share Write |
| 0x00001D02 | DDE Share Initiate Static |
| 0x00001D03 | DDE Share Initiate Link |
| 0x00001D04 | DDE Share Request |
| 0x00001D05 | DDE Share Advise |
| 0x00001D06 | DDE Share Poke |
| 0x00001D07 | DDE Share Execute |
| 0x00001D08 | DDE Share Add Items |
| 0x00001D09 | DDE Share List Items |
| 0x00001E00 | Create Child |
| 0x00001E01 | Delete Child |
| 0x00001E02 | List Contents |
| 0x00001E03 | Write Self |
| 0x00001E04 | Read Property |
| 0x00001E05 | Write Property |
| 0x00001E06 | Delete Tree |
| 0x00001E07 | List Object |
| 0x00001E08 | Control Access |
| 0x00001E09 | Undefined Access (no effect) Bit 9 |
| 0x00001E0A | Undefined Access (no effect) Bit 10 |
| 0x00001E0B | Undefined Access (no effect) Bit 11 |
| 0x00001E0C | Undefined Access (no effect) Bit 12 |
| 0x00001E0D | Undefined Access (no effect) Bit 13 |
| 0x00001E0E | Undefined Access (no effect) Bit 14 |
| 0x00001E0F | Undefined Access (no effect) Bit 15 |
| 0x00001F00 | Audit Set System Policy |
| 0x00001F01 | Audit Query System Policy |
| 0x00001F02 | Audit Set Per User Policy |
| 0x00001F03 | Audit Query Per User Policy |
| 0x00001F04 | Audit Enumerate Users |
| 0x00001F05 | Audit Set Options |
| 0x00001F06 | Audit Query Options |
| 0x00001F80 | Port sharing (read) |
| 0x00001F81 | Port sharing (write) |
| 0x00001FA0 | Default credentials |
| 0x00001FA1 | Credentials manager |
| 0x00001FA2 | Fresh credentials |
| 0x00001FA3 | Read Credential |
| 0x00001FA4 | Enumerate Credentials |
| 0x00001FA5 | Read Domain Credentials |
| 0x00001FA6 | Find Best Credential |
| 0x00001FA7 | Read By Token Handle |
| 0x00002000 | Kerberos |
| 0x00002001 | Preshared key |
| 0x00002002 | Unknown authentication |
| 0x00002003 | DES |
| 0x00002004 | 3DES |
| 0x00002005 | MD5 |
| 0x00002006 | SHA1 |
| 0x00002007 | Local computer |
| 0x00002008 | Remote computer |
| 0x00002009 | No state |
| 0x0000200A | Sent first (SA) payload |
| 0x0000200B | Sent second (KE) payload |
| 0x0000200C | Sent third (ID) payload |
| 0x0000200D | Initiator |
| 0x0000200E | Responder |
| 0x0000200F | No state |
| 0x00002010 | Sent first (SA) payload |
| 0x00002011 | Sent final payload |
| 0x00002012 | Complete |
| 0x00002013 | Unknown |
| 0x00002014 | Transport |
| 0x00002015 | Tunnel |
| 0x00002016 | IKE/AuthIP DoS prevention mode started |
| 0x00002017 | IKE/AuthIP DoS prevention mode stopped |
| 0x00002018 | Enabled |
| 0x00002019 | Not enabled |
| 0x0000201A | No state |
| 0x0000201B | Sent first (EM attributes) payload |
| 0x0000201C | Sent second (SSPI) payload |
| 0x0000201D | Sent third (hash) payload |
| 0x0000201E | IKEv1 |
| 0x0000201F | AuthIP |
| 0x00002020 | Anonymous |
| 0x00002021 | NTLM V2 |
| 0x00002022 | CGA |
| 0x00002023 | Certificate |
| 0x00002024 | SSL |
| 0x00002025 | None |
| 0x00002026 | DH group 1 |
| 0x00002027 | DH group 2 |
| 0x00002028 | DH group 14 |
| 0x00002029 | DH group ECP 256 |
| 0x0000202A | DH group ECP 384 |
| 0x0000202B | AES-128 |
| 0x0000202C | AES-192 |
| 0x0000202D | AES-256 |
| 0x0000202E | Certificate ECDSA P256 |
| 0x0000202F | Certificate ECDSA P384 |
| 0x00002030 | SSL ECDSA P256 |
| 0x00002031 | SSL ECDSA P384 |
| 0x00002032 | SHA 256 |
| 0x00002033 | SHA 384 |
| 0x00002034 | IKEv2 |
| 0x00002035 | EAP payload sent |
| 0x00002036 | Authentication payload sent |
| 0x00002037 | EAP |
| 0x00002038 | DH group 24 |
| 0x00002050 | System |
| 0x00002051 | Logon/Logoff |
| 0x00002052 | Object Access |
| 0x00002053 | Privilege Use |
| 0x00002054 | Detailed Tracking |
| 0x00002055 | Policy Change |
| 0x00002056 | Account Management |
| 0x00002057 | DS Access |
| 0x00002058 | Account Logon |
| 0x00002100 | Success removed |
| 0x00002101 | Success Added |
| 0x00002102 | Failure removed |
| 0x00002103 | Failure added |
| 0x00002104 | Success include removed |
| 0x00002105 | Success include added |
| 0x00002106 | Success exclude removed |
| 0x00002107 | Success exclude added |
| 0x00002108 | Failure include removed |
| 0x00002109 | Failure include added |
| 0x0000210A | Failure exclude removed |
| 0x0000210B | Failure exclude added |
| 0x00003000 | Security State Change |
| 0x00003001 | Security System Extension |
| 0x00003002 | System Integrity |
| 0x00003003 | IPsec Driver |
| 0x00003004 | Other System Events |
| 0x00003100 | Logon |
| 0x00003101 | Logoff |
| 0x00003102 | Account Lockout |
| 0x00003103 | IPsec Main Mode |
| 0x00003104 | Special Logon |
| 0x00003105 | IPsec Quick Mode |
| 0x00003106 | IPsec Extended Mode |
| 0x00003107 | Other Logon/Logoff Events |
| 0x00003108 | Network Policy Server |
| 0x00003109 | User / Device Claims |
| 0x0000310A | Group Membership |
| 0x00003200 | File System |
| 0x00003201 | Registry |
| 0x00003202 | Kernel Object |
| 0x00003203 | SAM |
| 0x00003204 | Other Object Access Events |
| 0x00003205 | Certification Services |
| 0x00003206 | Application Generated |
| 0x00003207 | Handle Manipulation |
| 0x00003208 | File Share |
| 0x00003209 | Filtering Platform Packet Drop |
| 0x0000320A | Filtering Platform Connection |
| 0x0000320B | Detailed File Share |
| 0x0000320C | Removable Storage |
| 0x0000320D | Central Policy Staging |
| 0x00003300 | Sensitive Privilege Use |
| 0x00003301 | Non Sensitive Privilege Use |
| 0x00003302 | Other Privilege Use Events |
| 0x00003400 | Process Creation |
| 0x00003401 | Process Termination |
| 0x00003402 | DPAPI Activity |
| 0x00003403 | RPC Events |
| 0x00003404 | Plug and Play Events |
| 0x00003405 | Token Right Adjusted Events |
| 0x00003500 | Audit Policy Change |
| 0x00003501 | Authentication Policy Change |
| 0x00003502 | Authorization Policy Change |
| 0x00003503 | MPSSVC Rule-Level Policy Change |
| 0x00003504 | Filtering Platform Policy Change |
| 0x00003505 | Other Policy Change Events |
| 0x00003600 | User Account Management |
| 0x00003601 | Computer Account Management |
| 0x00003602 | Security Group Management |
| 0x00003603 | Distribution Group Management |
| 0x00003604 | Application Group Management |
| 0x00003605 | Other Account Management Events |
| 0x00003700 | Directory Service Access |
| 0x00003701 | Directory Service Changes |
| 0x00003702 | Directory Service Replication |
| 0x00003703 | Detailed Directory Service Replication |
| 0x00003800 | Credential Validation |
| 0x00003801 | Kerberos Service Ticket Operations |
| 0x00003802 | Other Account Logon Events |
| 0x00003803 | Kerberos Authentication Service |
| 0x00003900 | Inbound |
| 0x00003901 | Outbound |
| 0x00003902 | Forward |
| 0x00003903 | Bidirectional |
| 0x00003904 | IP Packet |
| 0x00003905 | Transport |
| 0x00003906 | Forward |
| 0x00003907 | Stream |
| 0x00003908 | Datagram Data |
| 0x00003909 | ICMP Error |
| 0x0000390A | MAC 802.3 |
| 0x0000390B | MAC Native |
| 0x0000390C | vSwitch |
| 0x00003910 | Resource Assignment |
| 0x00003911 | Listen |
| 0x00003912 | Receive/Accept |
| 0x00003913 | Connect |
| 0x00003914 | Flow Established |
| 0x00003916 | Resource Release |
| 0x00003917 | Endpoint Closure |
| 0x00003918 | Connect Redirect |
| 0x00003919 | Bind Redirect |
| 0x00003920 | Stream Packet |
| 0x00003930 | ICMP Echo-Request |
| 0x00003931 | vSwitch Ingress |
| 0x00003932 | vSwitch Egress |
| 0x00003950 | |
| 0x00003951 | [NULL] |
| 0x00003952 | Value Added |
| 0x00003953 | Value Deleted |
| 0x00003954 | Active Directory Domain Services |
| 0x00003955 | Active Directory Lightweight Directory Services |
| 0x00003956 | Yes |
| 0x00003957 | No |
| 0x00003958 | Value Added With Expiration Time |
| 0x00003959 | Value Deleted With Expiration Time |
| 0x00003960 | Value Auto Deleted With Expiration Time |
| 0x00004000 | Add |
| 0x00004001 | Delete |
| 0x00004002 | Boot-time |
| 0x00004003 | Persistent |
| 0x00004004 | Not persistent |
| 0x00004005 | Block |
| 0x00004006 | Permit |
| 0x00004007 | Callout |
| 0x00004008 | MD5 |
| 0x00004009 | SHA-1 |
| 0x0000400A | SHA-256 |
| 0x0000400B | AES-GCM 128 |
| 0x0000400C | AES-GCM 192 |
| 0x0000400D | AES-GCM 256 |
| 0x0000400E | DES |
| 0x0000400F | 3DES |
| 0x00004010 | AES-128 |
| 0x00004011 | AES-192 |
| 0x00004012 | AES-256 |
| 0x00004013 | Transport |
| 0x00004014 | Tunnel |
| 0x00004015 | Responder |
| 0x00004016 | Initiator |
| 0x00004017 | AES-GMAC 128 |
| 0x00004018 | AES-GMAC 192 |
| 0x00004019 | AES-GMAC 256 |
| 0x00004020 | AuthNoEncap Transport |
| 0x00004200 | Enable WMI Account |
| 0x00004201 | Execute Method |
| 0x00004202 | Full Write |
| 0x00004203 | Partial Write |
| 0x00004204 | Provider Write |
| 0x00004205 | Remote Access |
| 0x00004206 | Subscribe |
| 0x00004207 | Publish |
| 0x00004208 | AES-GSM-128 |
| 0x00004209 | AES-GSM-256 |
| 0x00007858 | cts 0x00000117 Undefined Access (no effect) Bit 7 |
| 979 entries | |