LSA_CREATE_LOGON_SESSION callback function (ntsecpkg.h)

Creates logon sessions.

The logon session is identified by a unique logon ID ( LUID) assigned to the logon session.

LSA_CREATE_LOGON_SESSION LsaCreateLogonSession;

NTSTATUS LsaCreateLogonSession(
  [in] PLUID LogonId
)
{...}

[in] LogonId

Pointer to an LUID structure to be assigned to the new logon session. An authentication package calls AllocateLocallyUniqueId in order to generate this ID.

If the function succeeds, the return value is STATUS_SUCCESS.

If the function fails, the return value is an NTSTATUS code, which can be the following value or one of the LSA Policy Function Return Values.

The LsaNtStatusToWinError function converts an NTSTATUS code to a Windows error code.

If an authentication package creates extraneous logon sessions while determining whether to authenticate the user, it should delete them by calling DeleteLogonSession. If the authentication fails, the authentication package should delete all related logon sessions.

Because logon sessions use memory in the kernel, it is important to delete any unused or discarded logon sessions.

DeleteLogonSession

LSA_DISPATCH_TABLE

LSA_SECPKG_FUNCTION_TABLE