def test_hLsarAddPrivilegesToAccount_hLsarRemovePrivilegesFromAccount(self): dce, rpctransport, policyHandle = self.connect() resp = lsad.hLsarQueryInformationPolicy2(dce, policyHandle,lsad.POLICY_INFORMATION_CLASS.PolicyAccountDomainInformation) sid = resp['PolicyInformation']['PolicyAccountDomainInfo']['DomainSid'].formatCanonical() sid = sid + '-9999' resp = lsad.hLsarCreateAccount(dce, policyHandle, sid) accountHandle = resp['AccountHandle'] attributes = list() attribute = lsad.LSAPR_LUID_AND_ATTRIBUTES() attribute['Luid']['LowPart'] = 0 attribute['Luid']['HighPart'] = 3 attribute['Attributes'] = 3 attributes.append(attribute) try: resp = lsad.hLsarAddPrivilegesToAccount(dce,accountHandle, attributes) resp.dump() except: resp = lsad.hLsarDeleteObject(dce, accountHandle) return resp = lsad.hLsarRemovePrivilegesFromAccount(dce, accountHandle, NULL, 1) resp.dump() resp = lsad.hLsarDeleteObject(dce,accountHandle ) resp.dump()
def test_hLsarAddPrivilegesToAccount_hLsarRemovePrivilegesFromAccount( self): dce, rpctransport, policyHandle = self.connect() resp = lsad.hLsarQueryInformationPolicy2( dce, policyHandle, lsad.POLICY_INFORMATION_CLASS.PolicyAccountDomainInformation) sid = resp['PolicyInformation']['PolicyAccountDomainInfo'][ 'DomainSid'].formatCanonical() sid = sid + '-9999' resp = lsad.hLsarCreateAccount(dce, policyHandle, sid) accountHandle = resp['AccountHandle'] attributes = list() attribute = lsad.LSAPR_LUID_AND_ATTRIBUTES() attribute['Luid']['LowPart'] = 0 attribute['Luid']['HighPart'] = 3 attribute['Attributes'] = 3 attributes.append(attribute) try: resp = lsad.hLsarAddPrivilegesToAccount(dce, accountHandle, attributes) resp.dump() except: resp = lsad.hLsarDeleteObject(dce, accountHandle) return resp = lsad.hLsarRemovePrivilegesFromAccount(dce, accountHandle, NULL, 1) resp.dump() resp = lsad.hLsarDeleteObject(dce, accountHandle) resp.dump()