Microsoft Q&A

Windows Open Specifications

28 questions

Windows: A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.
Open Specifications: Technical documents for protocols, computer languages, standards support, and data portability. The goal with Open Specifications is to help developers open new opportunities to interoperate with Windows, SQL, Office, and SharePoint.

Browse all Windows tags

Filter

Content

All questions

No answers

Has answers

No answers or comments

With accepted answer

28 questions with Windows Open Specifications tags

3 answers

MS-Mice DTLS Handshake fails after Flight 4

Hi, I am having trouble performing the DTLS handshake as part of stream encryption in Ms-Mice. After Flight 4 (ref: RFC6347): which includes: ServerHello, Certificate, ServerKeyExchange, CertificateRequest and ServerHelloDone the client closes the…

asked

R2G2 1

edited an answer

Obaid Farooqi MSFT 336 Microsoft Employee

1 answer

Printing RPC over TCP - disable the encryption

Hi, is there a way to disable the encryption when Windows client prints using the RPC SPOOLSS over TCP (recent enforcement of Win11)? Domain policy or any other direction? …

asked

Lilia 1

answered

Sreekanth Nadendla 231 Microsoft Employee

1 answer

Thread closed

The question was answered.....

asked

Timo Merle 1

edited the question

Hung-Chun Yu 896 Microsoft Employee

1 answer

SMB2 TREE_CONNECT response MaximalAccess: file or directory access mask?

I have hacked impacket a bit to provide access to the MaximalAccess field in the SMB2 TREE_CONNECT Response. However, I am wondering how to interpret this field. The docs say Contains the maximal access for the user that establishes the tree connect …

asked

Diederick Niehorster 1

edited the question

Hung-Chun Yu 896 Microsoft Employee

0 answers

GSSAPI FIPS compliant AES encryption

Are there any plans in the pipeline to update MSFT's GSSAPI implementation to add support for AES-256 encryption? I know that no RFC currently exists for this, the strongest session key supported by the RFCs is 3DES which is deprecated. On a…

asked

Griff James 1

commented

Jeff McCashland 476 Microsoft Employee

1 answer

Renaming "Serbian (Montenegro)" into Montenegrin

Greetings! I wanted to ask if the change officially made by Unicode and the CLDR, of renaming “Serbian (Montenegro)” into Montenegrin will be done? Montenegrin language has been officially recognized as a separate language with its own code ISO 639-3…

asked

Luka Bulatovic 1

answered

Sreekanth Nadendla 231 Microsoft Employee

5 answers

[MS-CDP] Advertising Beacon Documentation

Hi, I'm currently looking at the Bluetooth: Advertising Beacon documentation. It describes one byte as fixed 0xFF and two bytes fixed as 0x0006 followed by 24 bytes of beacon data. This gives 27 bytes in total. The length field, in contrast, says 30…

asked

King Kong 86

answered

Sreekanth Nadendla 231 Microsoft Employee

1 answer

[MS-WCCE] ICertRequestD2::GetCAProperty incorrect description for CR_PROP_CAXCHGCERTCHAIN

This applies to [MS-WCCE] §3.2.1.4.3.2.16 PropID = 0x00000010 (CR_PROP_CAXCHGCERTCHAIN) "CA Exchange Certificate Chain" The documentation says that: Contains CA's certificate stored in the Signing_Cert_Certificate datum and its parent…

asked

Vadims Podāns 8,081 Microsoft MVP

accepted

Vadims Podāns 8,081 Microsoft MVP

1 answer

[MS-WCCE] ICertRequestD2::GetCAProperty with CR_PROP_CAXCHGCERTCHAIN, incorrect chain certificate is returned

This issue applies to both, [MS-WCCE] ICertRequestD2::GetCAProperty and [MS-CSRA] ICertAdminD2::GetCAProperty methods since they share the same functionality. Property name in subject: CR_PROP_CAXCHGCERTCHAIN with `` parameter. The problem I'm facing is…

asked

Vadims Podāns 8,081 Microsoft MVP

accepted

Vadims Podāns 8,081 Microsoft MVP

3 answers

FILE_ACTION_MODIFIED received if folder was added and if folder was removed + FILE_ACTION_MODIFIED not called at all if folder was renamed to different directory

According to https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-fscc/634043d7-7b39-47e9-9e26-bda64685e4c9 "[If] a file is renamed to a different directory the client will receive [FILE_ACTION_REMOVED] along with…

asked

Wallby 26

answered

Obaid Farooqi MSFT 336 Microsoft Employee

2 answers

[MS-WCCE] and [MS-CRTD] incorrent CT_FLAG_DONOTPERSISTINDB definition

The CT_FLAG_DONOTPERSISTINDB certificate template's setting flag numerical value is incorrect. The CT_FLAG_DONOTPERSISTINDB is defined in [MS-CRTD] §2.4 as: CT_FLAG_DONOTPERSISTINDB = 0x00000400 and referenced in [MS-WCCE] §3.2.2.6.2.1.4.4.1…

asked

Vadims Podāns 8,081 Microsoft MVP

commented

Vadims Podāns 8,081 Microsoft MVP

1 answer

[MS-DRSR] DRS_EXTENSIONS_INT returned by the server contains the Pid of the server process

Hello, The documentation for DRS_EXTENSIONS_INT https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-drsr/3ee529b1-23db-4996-948a-042f04998e91 says that: Pid (4 bytes): A 32-bit, signed integer value that specifies the process…

asked

Clément Notin 6

answered

Obaid Farooqi MSFT 336 Microsoft Employee

3 answers

[MS-WCCE] §3.2.2.6.2.1.4.5.7 CT_FLAG_PREVIOUS_APPROVAL_VALIDATE_REENROLLMENT question

I have a question on CT_FLAG_PREVIOUS_APPROVAL_VALIDATE_REENROLLMENT flag processing rule as outlined in [MS-WCCE] §3.2.2.6.2.1.4.5.7 The document says that: The CA MUST ignore the CT_FLAG_PEND_ALL_REQUESTS flag. However, my recent tests…

asked

Vadims Podāns 8,081 Microsoft MVP

commented

Vadims Podāns 8,081 Microsoft MVP

11 answers

WMIC stopped working on Windows 10 2004

I use WMIC to pull logs from remote machines internally. After we upgraded a few machines to Windows 10 2004 it stopped working for those machines and we now getting the following error: [wmi/wmic.c:196:main()] ERROR: Login to remote object. …

asked

James Peppe 11

answered

Docs 12,866

1 answer

[MS-DTYP] ACCESS_ALLOWED_CALLBACK_OBJECT_ACE and ACCESS_DENIED_CALLBACK_OBJECT_ACE: why these ACEs does not count during access control processing?

During my own internal testing I found that any ACEs with types ACCESS_ALLOWED_CALLBACK_OBJECT_ACE and ACCESS_DENIED_CALLBACK_OBJECT_ACE does not count during access control processing. I made different variations of the ACEs: with or without ObjectType…

asked

Yury Strozhevsky 116

commented

Jeff McCashland 476 Microsoft Employee

1 answer

[MS-WCCE] §3.2.2.6.2.1.4.5.7 typo in enumeration values

In [MS-WCCE] §3.2.2.6.2.1.4.5.7, the following enumeration values have incorrect integral value: doc value: CT_FLAG_ATTEST_REQUIRED 0x000002000 correct value: CT_FLAG_ATTEST_REQUIRED 0x00002000 doc value: CT_FLAG_ATTEST_PREFERRED 0x000001000 …

asked

Vadims Podāns 8,081 Microsoft MVP

accepted

Vadims Podāns 8,081 Microsoft MVP

3 answers

[MS-WCCE] Incorrect CA Exchange certificate algorithm definition

In [MS-WCCE], §3.2.1.4.3.2.15.1 several statements are incorrect: 2.a. For the Subject of the exchange certificate, a common name attribute is used with a value the same as the value of the common name attribute in the subject information of the CA…

asked

Vadims Podāns 8,081 Microsoft MVP

accepted

Vadims Podāns 8,081 Microsoft MVP

3 answers

SMB client changing from one server interface to another

I'm poring over a number of Windows 10 to SMB Server pcaps and noticing a pattern which looks like this: Negotiate Protocol Session Setup Tree Connect Request Tree: \server\share Ioctl FSCTL_QUERY_NETWORK_INTERFACE_INFO ... It is the 4th step where I…

asked

Stuart Kendrick 21

accepted

Stuart Kendrick 21

2 answers

[MS-WCCE] §3.2.1.4.3.2.10 ICertRequest2D::GetCAProperty(CR_PROP_CATYPE) incomplete

Documentation says: If the CA signing certificate that is stored in the Signing_Cert_Certificate column is a root certificate, the CA MUST return 0x00000003. Otherwise, the CA MUST return 0x00000004. it is incomplete, because it doesn't include…

asked

Vadims Podāns 8,081 Microsoft MVP

commented

Vadims Podāns 8,081 Microsoft MVP

1 answer

[MS-WCCE] broken links to [KEYGEN] specifications

[MS-WCCE] document contains several links to Netscape Keygen specifications that point to external resource. However, external resource no longer contain keygen specs. Example: §3.2.1.4.2.1.4.1.4 New Certificate Request Using KEYGEN Request Format.…

asked

Vadims Podāns 8,081 Microsoft MVP

commented

Jeff McCashland 476 Microsoft Employee