| lsa.access_mask | Access Mask | Unsigned 32-bit integer | LSA Access Mask |
| lsa.access_mask.create_account | Create account | Boolean | Create account |
| lsa.access_mask.create_priv | Create privilege | Boolean | Create privilege |
| lsa.access_mask.create_secret | Create secret | Boolean | Create secret |
| lsa.access_mask.get_privateinfo | Get private info | Boolean | Get private info |
| lsa.access_mask.lookup_names | Lookup names | Boolean | Lookup names |
| lsa.access_mask.server_admin | Server admin | Boolean | Server admin |
| lsa.access_mask.set_audit_requirements | Set audit requirements | Boolean | Set audit requirements |
| lsa.access_mask.set_default_quota_limits | Set default quota limits | Boolean | Set default quota limits |
| lsa.access_mask.trust_admin | Trust admin | Boolean | Trust admin |
| lsa.access_mask.view_audit_info | View audit info | Boolean | View audit info |
| lsa.access_mask.view_local_info | View local info | Boolean | View local info |
| lsa.acct | Account | String | Account |
| lsa.attr | Attr | Unsigned 64-bit integer | LSA Attributes |
| lsa.auth.blob | Auth blob | Byte array | |
| lsa.auth.len | Auth Len | Unsigned 32-bit integer | Auth Info len |
| lsa.auth.type | Auth Type | Unsigned 32-bit integer | Auth Info type |
| lsa.auth.update | Update | Unsigned 64-bit integer | LSA Auth Info update |
| lsa.controller | Controller | String | Name of Domain Controller |
| lsa.count | Count | Unsigned 32-bit integer | Count of objects |
| lsa.cur.mtime | Current MTime | Date/Time stamp | Current MTime to set |
| lsa.domain | Domain | String | Domain |
| lsa.flat_name | Flat Name | String | |
| lsa.forest | Forest | String | |
| lsa.hnd | Context Handle | Byte array | LSA policy handle |
| lsa.index | Index | Unsigned 32-bit integer | |
| lsa.info.level | Level | Unsigned 16-bit integer | Information level of requested data |
| lsa.info_type | Info Type | Unsigned 32-bit integer | |
| lsa.key | Key | String | |
| lsa.max_count | Max Count | Unsigned 32-bit integer | |
| lsa.mod.mtime | MTime | Date/Time stamp | Time when this modification occured |
| lsa.mod.seq_no | Seq No | Unsigned 64-bit integer | Sequence number for this modification |
| lsa.name | Name | String | |
| lsa.new_pwd | New Password | Byte array | New password |
| lsa.num_mapped | Num Mapped | Unsigned 32-bit integer | |
| lsa.obj_attr | Attributes | Unsigned 32-bit integer | LSA Attributes |
| lsa.obj_attr.len | Length | Unsigned 32-bit integer | Length of object attribute structure |
| lsa.obj_attr.name | Name | String | Name of object attribute |
| lsa.old.mtime | Old MTime | Date/Time stamp | Old MTime for this object |
| lsa.old_pwd | Old Password | Byte array | Old password |
| lsa.opnum | Operation | Unsigned 16-bit integer | Operation |
| lsa.paei.enabled | Enabled | Unsigned 8-bit integer | If Audit Events Information is Enabled or not |
| lsa.paei.settings | Settings | Unsigned 32-bit integer | Audit Events Information settings |
| lsa.pali.log_size | Log Size | Unsigned 32-bit integer | Size of audit log |
| lsa.pali.next_audit_record | Next Audit Record | Unsigned 32-bit integer | Next audit record |
| lsa.pali.percent_full | Percent Full | Unsigned 32-bit integer | How full audit log is in percentage |
| lsa.pali.retention_period | Retention Period | Time duration | |
| lsa.pali.shutdown_in_progress | Shutdown in progress | Unsigned 8-bit integer | Flag whether shutdown is in progress or not |
| lsa.pali.time_to_shutdown | Time to shutdown | Time duration | Time to shutdown |
| lsa.policy.info | Info Class | Unsigned 16-bit integer | Policy information class |
| lsa.privilege.name | Name | String | LSA Privilege Name |
| lsa.qos.effective_only | Effective only | Unsigned 8-bit integer | QOS Flag whether this is Effective Only or not |
| lsa.qos.imp_lev | Impersonation level | Unsigned 16-bit integer | QOS Impersonation Level |
| lsa.qos.len | Length | Unsigned 32-bit integer | Length of quality of service structure |
| lsa.qos.track_ctx | Context Tracking | Unsigned 8-bit integer | QOS Context Tracking Mode |
| lsa.quota.max_wss | Max WSS | Unsigned 32-bit integer | Size of Quota Max WSS |
| lsa.quota.min_wss | Min WSS | Unsigned 32-bit integer | Size of Quota Min WSS |
| lsa.quota.non_paged_pool | Non Paged Pool | Unsigned 32-bit integer | Size of Quota non-Paged Pool |
| lsa.quota.paged_pool | Paged Pool | Unsigned 32-bit integer | Size of Quota Paged Pool |
| lsa.quota.pagefile | Pagefile | Unsigned 32-bit integer | Size of quota pagefile usage |
| lsa.rc | Return code | Unsigned 32-bit integer | LSA return status code |
| lsa.remove_all | Remove All | Unsigned 8-bit integer | Flag whether all rights should be removed or only the specified ones |
| lsa.resume_handle | Resume Handle | Unsigned 32-bit integer | Resume Handle |
| lsa.rid | RID | Unsigned 32-bit integer | RID |
| lsa.rid.offset | RID Offset | Unsigned 32-bit integer | RID Offset |
| lsa.rights | Rights | String | Account Rights |
| lsa.sd_size | Size | Unsigned 32-bit integer | Size of lsa security descriptor |
| lsa.secret | LSA Secret | Byte array | |
| lsa.server | Server | String | Name of Server |
| lsa.server_role | Role | Unsigned 16-bit integer | LSA Server Role |
| lsa.sid_type | SID Type | Unsigned 16-bit integer | Type of SID |
| lsa.size | Size | Unsigned 32-bit integer | |
| lsa.size_needed | Size Needed | Unsigned 16-bit integer | |
| lsa.source | Source | String | Replica Source |
| lsa.trust.attr | Trust Attr | Unsigned 32-bit integer | Trust attributes |
| lsa.trust.attr.non_trans | Non Transitive | Boolean | Non Transitive trust |
| lsa.trust.attr.tree_parent | Tree Parent | Boolean | Tree Parent trust |
| lsa.trust.attr.tree_root | Tree Root | Boolean | Tree Root trust |
| lsa.trust.attr.uplevel_only | Upleve only | Boolean | Uplevel only trust |
| lsa.trust.direction | Trust Direction | Unsigned 32-bit integer | Trust direction |
| lsa.trust.type | Trust Type | Unsigned 32-bit integer | Trust type |
| lsa.trusted.info_level | Info Level | Unsigned 16-bit integer | Information level of requested Trusted Domain Information |
| lsa.unknown.char | Unknown char | Unsigned 8-bit integer | Unknown char. If you know what this is, contact ethereal developers. |
| lsa.unknown.hyper | Unknown hyper | Unsigned 64-bit integer | Unknown hyper. If you know what this is, contact ethereal developers. |
| lsa.unknown.long | Unknown long | Unsigned 32-bit integer | Unknown long. If you know what this is, contact ethereal developers. |
| lsa.unknown.short | Unknown short | Unsigned 16-bit integer | Unknown short. If you know what this is, contact ethereal developers. |
| lsa.unknown_string | Unknown string | String | Unknown string. If you know what this is, contact ethereal developers. |
| nt.luid.high | High | Unsigned 32-bit integer | LUID High component |
| nt.luid.low | Low | Unsigned 32-bit integer | LUID Low component |