| netlogon.acct.expiry_time | Acct Expiry Time | Date/Time stamp | When this account will expire |
| netlogon.acct_desc | Acct Desc | String | Account Description |
| netlogon.acct_name | Acct Name | String | Account Name |
| netlogon.alias_name | Alias Name | String | Alias Name |
| netlogon.alias_rid | Alias RID | Unsigned 32-bit integer | |
| netlogon.attrs | Attributes | Unsigned 32-bit integer | Attributes |
| netlogon.audit_retention_period | Audit Retention Period | Time duration | Audit retention period |
| netlogon.auditing_mode | Auditing Mode | Unsigned 8-bit integer | Auditing Mode |
| netlogon.auth.data | Auth Data | Byte array | Auth Data |
| netlogon.auth.size | Auth Size | Unsigned 32-bit integer | Size of AuthData in bytes |
| netlogon.auth_flags | Auth Flags | Unsigned 32-bit integer | |
| netlogon.authoritative | Authoritative | Unsigned 8-bit integer | |
| netlogon.bad_pw_count | Bad PW Count | Unsigned 32-bit integer | Number of failed logins |
| netlogon.bad_pw_count16 | Bad PW Count | Unsigned 16-bit integer | Number of failed logins |
| netlogon.blob | BLOB | Byte array | BLOB |
| netlogon.blob.size | Size | Unsigned 32-bit integer | Size in bytes of BLOB |
| netlogon.challenge | Challenge | Byte array | Netlogon challenge |
| netlogon.cipher_current_data | Cipher Current Data | Byte array | |
| netlogon.cipher_current_set_time | Cipher Current Set Time | Date/Time stamp | Time when current cipher was initiated |
| netlogon.cipher_len | Cipher Len | Unsigned 32-bit integer | |
| netlogon.cipher_maxlen | Cipher Max Len | Unsigned 32-bit integer | |
| netlogon.cipher_old_data | Cipher Old Data | Byte array | |
| netlogon.cipher_old_set_time | Cipher Old Set Time | Date/Time stamp | Time when previous cipher was initiated |
| netlogon.client.site_name | Client Site Name | String | Client Site Name |
| netlogon.code | Code | Unsigned 32-bit integer | Code |
| netlogon.codepage | Codepage | Unsigned 16-bit integer | Codepage setting for this account |
| netlogon.comment | Comment | String | Comment |
| netlogon.computer_name | Computer Name | String | Computer Name |
| netlogon.count | Count | Unsigned 32-bit integer | |
| netlogon.country | Country | Unsigned 16-bit integer | Country setting for this account |
| netlogon.credential | Credential | Byte array | Netlogon credential |
| netlogon.database_id | Database Id | Unsigned 32-bit integer | Database Id |
| netlogon.db_create_time | DB Create Time | Date/Time stamp | Time when created |
| netlogon.db_modify_time | DB Modify Time | Date/Time stamp | Time when last modified |
| netlogon.dc.address | DC Address | String | DC Address |
| netlogon.dc.address_type | DC Address Type | Unsigned 32-bit integer | DC Address Type |
| netlogon.dc.name | DC Name | String | DC Name |
| netlogon.dc.site_name | DC Site Name | String | DC Site Name |
| netlogon.delta_type | Delta Type | Unsigned 16-bit integer | Delta Type |
| netlogon.dir_drive | Dir Drive | String | Drive letter for home directory |
| netlogon.dns.forest_name | DNS Forest Name | String | DNS Forest Name |
| netlogon.dns_domain | DNS Domain | String | DNS Domain Name |
| netlogon.dns_host | DNS Host | String | DNS Host |
| netlogon.domain | Domain | String | Domain |
| netlogon.domain_create_time | Domain Create Time | Date/Time stamp | Time when this domain was created |
| netlogon.domain_modify_time | Domain Modify Time | Date/Time stamp | Time when this domain was last modified |
| netlogon.downlevel_domain | Downlevel Domain | String | Downlevel Domain Name |
| netlogon.dummy | Dummy | String | Dummy string |
| netlogon.entries | Entries | Unsigned 32-bit integer | |
| netlogon.event_audit_option | Event Audit Option | Unsigned 32-bit integer | Event audit option |
| netlogon.flags | Flags | Unsigned 32-bit integer | |
| netlogon.full_name | Full Name | String | Full Name |
| netlogon.group_desc | Group Desc | String | Group Description |
| netlogon.group_name | Group Name | String | Group Name |
| netlogon.group_rid | Group RID | Unsigned 32-bit integer | |
| netlogon.handle | Handle | String | Logon Srv Handle |
| netlogon.home_dir | Home Dir | String | Home Directory |
| netlogon.kickoff_time | Kickoff Time | Date/Time stamp | Time when this user will be kicked off |
| netlogon.len | Len | Unsigned 32-bit integer | Length |
| netlogon.level | Level | Unsigned 32-bit integer | Which option of the union is represented here |
| netlogon.level16 | Level | Unsigned 16-bit integer | Which option of the union is represented here |
| netlogon.lm_chal_resp | LM Chal resp | Byte array | Challenge response for LM authentication |
| netlogon.lm_owf_pwd | LM Pwd | Byte array | LanManager OWF Password |
| netlogon.lm_owf_pwd.encrypted | Encrypted LM Pwd | Byte array | Encrypted LanManager OWF Password |
| netlogon.lm_pwd_present | LM PWD Present | Unsigned 8-bit integer | Is LanManager password present for this account? |
| netlogon.logoff_time | Logoff Time | Date/Time stamp | Time for last time this user logged off |
| netlogon.logon_attempts | Logon Attempts | Unsigned 32-bit integer | Number of logon attempts |
| netlogon.logon_count | Logon Count | Unsigned 32-bit integer | Number of successful logins |
| netlogon.logon_count16 | Logon Count | Unsigned 16-bit integer | Number of successful logins |
| netlogon.logon_id | Logon ID | Unsigned 64-bit integer | Logon ID |
| netlogon.logon_script | Logon Script | String | Logon Script |
| netlogon.logon_time | Logon Time | Date/Time stamp | Time for last time this user logged on |
| netlogon.max_audit_event_count | Max Audit Event Count | Unsigned 32-bit integer | Max audit event count |
| netlogon.max_log_size | Max Log Size | Unsigned 32-bit integer | Max Size of log |
| netlogon.max_size | Max Size | Unsigned 32-bit integer | Max Size of database |
| netlogon.max_working_set_size | Max Working Set Size | Unsigned 32-bit integer | |
| netlogon.min_passwd_len | Min Password Len | Unsigned 16-bit integer | Minimum length of password |
| netlogon.min_working_set_size | Min Working Set Size | Unsigned 32-bit integer | |
| netlogon.modify_count | Modify Count | Unsigned 64-bit integer | How many times the object has been modified |
| netlogon.neg_flags | Neg Flags | Unsigned 32-bit integer | Negotiation Flags |
| netlogon.next_reference | Next Reference | Unsigned 32-bit integer | |
| netlogon.nonpaged_pool_limit | Non-Paged Pool Limit | Unsigned 32-bit integer | |
| netlogon.nt_chal_resp | NT Chal resp | Byte array | Challenge response for NT authentication |
| netlogon.nt_owf_pwd | NT Pwd | Byte array | NT OWF Password |
| netlogon.nt_pwd_present | NT PWD Present | Unsigned 8-bit integer | Is NT password present for this account? |
| netlogon.num_dc | Num DCs | Unsigned 32-bit integer | Number of domain controllers |
| netlogon.num_deltas | Num Deltas | Unsigned 32-bit integer | Number of SAM Deltas in array |
| netlogon.num_other_groups | Num Other Groups | Unsigned 32-bit integer | |
| netlogon.num_rids | Num RIDs | Unsigned 32-bit integer | Number of RIDs |
| netlogon.oem_info | OEM Info | String | OEM Info |
| netlogon.opnum | Operation | Unsigned 16-bit integer | Operation |
| netlogon.pac.data | Pac Data | Byte array | Pac Data |
| netlogon.pac.size | Pac Size | Unsigned 32-bit integer | Size of PacData in bytes |
| netlogon.page_file_limit | Page File Limit | Unsigned 32-bit integer | |
| netlogon.paged_pool_limit | Paged Pool Limit | Unsigned 32-bit integer | |
| netlogon.param_ctrl | Param Ctrl | Unsigned 32-bit integer | Param ctrl |
| netlogon.parameters | Parameters | String | Parameters |
| netlogon.passwd_history_len | Passwd History Len | Unsigned 16-bit integer | Length of password history |
| netlogon.pdc_connection_status | PDC Connection Status | Unsigned 32-bit integer | PDC Connection Status |
| netlogon.principal | Principal | String | Principal |
| netlogon.priv | Priv | Unsigned 32-bit integer | |
| netlogon.privilege_control | Privilege Control | Unsigned 32-bit integer | |
| netlogon.privilege_entries | Privilege Entries | Unsigned 32-bit integer | |
| netlogon.privilege_name | Privilege Name | String | |
| netlogon.profile_path | Profile Path | String | Profile Path |
| netlogon.pwd_can_change_time | PWD Can Change | Date/Time stamp | When this users password may be changed |
| netlogon.pwd_expired | PWD Expired | Unsigned 8-bit integer | Whether this password has expired or not |
| netlogon.pwd_last_set_time | PWD Last Set | Date/Time stamp | Last time this users password was changed |
| netlogon.pwd_must_change_time | PWD Must Change | Date/Time stamp | When this users password must be changed |
| netlogon.rc | Return code | Unsigned 32-bit integer | Netlogon return code |
| netlogon.reference | Reference | Unsigned 32-bit integer | |
| netlogon.reserved | Reserved | Unsigned 32-bit integer | Reserved |
| netlogon.restart_state | Restart State | Unsigned 16-bit integer | Restart State |
| netlogon.rid | User RID | Unsigned 32-bit integer | |
| netlogon.sec_chn_type | Sec Chn Type | Unsigned 16-bit integer | Secure Channel Type |
| netlogon.security_information | Security Information | Unsigned 32-bit integer | Security Information |
| netlogon.sensitive_data | Data | Byte array | Sensitive Data |
| netlogon.sensitive_data_flag | Sensitive Data | Unsigned 8-bit integer | Sensitive data flag |
| netlogon.sensitive_data_len | Length | Unsigned 32-bit integer | Length of sensitive data |
| netlogon.serial_number | Serial Number | Unsigned 32-bit integer | |
| netlogon.server | Server | String | Server |
| netlogon.site_name | Site Name | String | Site Name |
| netlogon.sync_context | Sync Context | Unsigned 32-bit integer | Sync Context |
| netlogon.system_flags | System Flags | Unsigned 32-bit integer | |
| netlogon.tc_connection_status | TC Connection Status | Unsigned 32-bit integer | TC Connection Status |
| netlogon.time_limit | Time Limit | Time duration | |
| netlogon.timestamp | Timestamp | Date/Time stamp | |
| netlogon.trusted_dc | Trusted DC | String | Trusted DC |
| netlogon.unknown.char | Unknown char | Unsigned 8-bit integer | Unknown char. If you know what this is, contact ethereal developers. |
| netlogon.unknown.long | Unknown long | Unsigned 32-bit integer | Unknown long. If you know what this is, contact ethereal developers. |
| netlogon.unknown.short | Unknown short | Unsigned 16-bit integer | Unknown short. If you know what this is, contact ethereal developers. |
| netlogon.unknown_string | Unknown string | String | Unknown string. If you know what this is, contact ethereal developers. |
| netlogon.user_flags | User Flags | Unsigned 32-bit integer | |
| netlogon.user_session_key | User Session Key | Byte array | User Session Key |
| netlogon.validation_level | Validation Level | Unsigned 16-bit integer | Requested level of validation |
| netlogon.wkst.fqdn | Wkst FQDN | String | Workstation FQDN |
| netlogon.wkst.name | Wkst Name | String | Workstation Name |
| netlogon.wkst.os | Wkst OS | String | Workstation OS |
| netlogon.wkst.site_name | Wkst Site Name | String | Workstation Site Name |
| netlogon.wksts | Workstations | String | Workstations |