| nt.acct_ctrl | Acct Ctrl | Unsigned 32-bit integer | Acct CTRL |
| nt.str.len | Length | Unsigned 32-bit integer | Length of string in short integers |
| nt.str.max_len | Max Length | Unsigned 32-bit integer | Max Length of string in short integers |
| nt.str.offset | Offset | Unsigned 32-bit integer | Offset into string in short integers |
| nt.string.length | Length | Unsigned 16-bit integer | Length of string in bytes |
| nt.string.size | Size | Unsigned 16-bit integer | Size of string in bytes |
| samr.access | Access Mask | Unsigned 32-bit integer | Access |
| samr.access_granted | Access Granted | Unsigned 32-bit integer | Access Granted |
| samr.acct_desc | Account Desc | String | Account Description |
| samr.acct_expiry_time | Acct Expiry | Date/Time stamp | When this user account expires |
| samr.acct_name | Account Name | String | Name of Account |
| samr.alias | Alias | Unsigned 32-bit integer | Alias |
| samr.alias_name | Alias Name | String | Name of Alias |
| samr.attr | Attributes | Unsigned 32-bit integer | |
| samr.bad_pwd_count | Bad Pwd Count | Unsigned 16-bit integer | Number of bad pwd entries for this user |
| samr.codepage | Codepage | Unsigned 16-bit integer | Codepage setting for this user |
| samr.comment | Comment | String | Comment |
| samr.count | Count | Unsigned 32-bit integer | Number of elements in following array |
| samr.country | Country | Unsigned 16-bit integer | Country setting for this user |
| samr.crypt_hash | Hash | Byte array | Encrypted Hash |
| samr.crypt_password | Password | Byte array | Encrypted Password |
| samr.dc | DC | String | Name of Domain Controller |
| samr.divisions | Divisions | Unsigned 16-bit integer | Number of divisions for LOGON_HOURS |
| samr.domain | Domain | String | Name of Domain |
| samr.entries | Entries | Unsigned 32-bit integer | Number of entries to return |
| samr.full_name | Full Name | String | Full Name of Account |
| samr.group | Group | Unsigned 32-bit integer | Group |
| samr.group_name | Group Name | String | Name of Group |
| samr.hnd | Context Handle | Byte array | |
| samr.home | Home | String | Home directory for this user |
| samr.home_drive | Home Drive | String | Home drive for this user |
| samr.index | Index | Unsigned 32-bit integer | Index |
| samr.info_type | Info Type | Unsigned 32-bit integer | Information Type |
| samr.kickoff_time | Kickoff Time | Date/Time stamp | Time when this user will be kicked off |
| samr.level | Level | Unsigned 16-bit integer | Level requested/returned for Information |
| samr.lm_change | LM Change | Unsigned 8-bit integer | LM Change value |
| samr.lm_pwd_set | LM Pwd Set | Unsigned 8-bit integer | Flag indicating whether the LanManager password has been set |
| samr.logoff_time | Logoff Time | Date/Time stamp | Time for last time this user logged off |
| samr.logon_count | Logon Count | Unsigned 16-bit integer | Number of logons for this user |
| samr.logon_time | Logon Time | Date/Time stamp | Time for last time this user logged on |
| samr.mask | Mask | Unsigned 32-bit integer | Mask |
| samr.max_entries | Max Entries | Unsigned 32-bit integer | Maximum number of entries |
| samr.max_pwd_age | Max Pwd Age | Time duration | Maximum Password Age before it expires |
| samr.min_pwd_age | Min Pwd Age | Time duration | Minimum Password Age before it can be changed |
| samr.min_pwd_len | Min Pwd Len | Unsigned 16-bit integer | Minimum Password Length |
| samr.nt_pwd_set | NT Pwd Set | Unsigned 8-bit integer | Flag indicating whether the NT password has been set |
| samr.num_aliases | Num Aliases | Unsigned 32-bit integer | Number of aliases in this domain |
| samr.num_groups | Num Groups | Unsigned 32-bit integer | Number of groups in this domain |
| samr.num_users | Num Users | Unsigned 32-bit integer | Number of users in this domain |
| samr.opnum | Operation | Unsigned 16-bit integer | Operation |
| samr.parameters | Parameters | String | Parameters |
| samr.pref_maxsize | Pref MaxSize | Unsigned 32-bit integer | Maximum Size of data to return |
| samr.profile | Profile | String | Profile for this user |
| samr.pwd_Expired | Expired flag | Unsigned 8-bit integer | Flag indicating if the password for this account has expired or not |
| samr.pwd_can_change_time | PWD Can Change | Date/Time stamp | When this users password may be changed |
| samr.pwd_history_len | Pwd History Len | Unsigned 16-bit integer | Password History Length |
| samr.pwd_last_set_time | PWD Last Set | Date/Time stamp | Last time this users password was changed |
| samr.pwd_must_change_time | PWD Must Change | Date/Time stamp | When this users password must be changed |
| samr.rc | Return code | Unsigned 32-bit integer | |
| samr.resume_hnd | Resume Hnd | Unsigned 32-bit integer | Resume handle |
| samr.ret_size | Returned Size | Unsigned 32-bit integer | Number of returned objects in this PDU |
| samr.revision | Revision | Unsigned 64-bit integer | Revision number for this structure |
| samr.rid | Rid | Unsigned 32-bit integer | RID |
| samr.rid.attrib | Rid Attrib | Unsigned 32-bit integer | |
| samr.script | Script | String | Login script for this user |
| samr.server | Server | String | Name of Server |
| samr.start_idx | Start Idx | Unsigned 32-bit integer | Start Index for returned Information |
| samr.total_size | Total Size | Unsigned 32-bit integer | Total size of data |
| samr.type | Type | Unsigned 32-bit integer | Type |
| samr.unknown.char | Unknown char | Unsigned 8-bit integer | Unknown char. If you know what this is, contact ethereal developers. |
| samr.unknown.hyper | Unknown hyper | Unsigned 64-bit integer | Unknown hyper. If you know what this is, contact ethereal developers. |
| samr.unknown.long | Unknown long | Unsigned 32-bit integer | Unknown long. If you know what this is, contact ethereal developers. |
| samr.unknown.short | Unknown short | Unsigned 16-bit integer | Unknown short. If you know what this is, contact ethereal developers. |
| samr.unknown_string | Unknown string | String | Unknown string. If you know what this is, contact ethereal developers. |
| samr.unknown_time | Unknown time | Date/Time stamp | Unknown NT TIME, contact ethereal developers if you know what this is |
| samr.workstations | Workstations | String | |
| samr_access_mask.alias_add_member | Add member | Boolean | Add member |
| samr_access_mask.alias_get_members | Get members | Boolean | Get members |
| samr_access_mask.alias_lookup_info | Lookup info | Boolean | Lookup info |
| samr_access_mask.alias_remove_member | Remove member | Boolean | Remove member |
| samr_access_mask.alias_set_info | Set info | Boolean | Set info |
| samr_access_mask.connect_enum_domains | Enum domains | Boolean | Enum domains |
| samr_access_mask.connect_open_domain | Open domain | Boolean | Open domain |
| samr_access_mask.connect_shutdown_server | Shutdown server | Boolean | Shutdown server |
| samr_access_mask.connect_unknown_01 | Unknown 0x01 | Boolean | Unknown 0x01 |
| samr_access_mask.connect_unknown_04 | Unknown 0x04 | Boolean | Unknown 0x04 |
| samr_access_mask.connect_unknown_08 | Unknown 0x08 | Boolean | Unknown 0x08 |
| samr_access_mask.domain_create_alias | Create alias | Boolean | Create alias |
| samr_access_mask.domain_create_group | Create group | Boolean | Create group |
| samr_access_mask.domain_create_user | Create user | Boolean | Create user |
| samr_access_mask.domain_enum_accounts | Enum accounts | Boolean | Enum accounts |
| samr_access_mask.domain_lookup_info1 | Lookup info1 | Boolean | Lookup info1 |
| samr_access_mask.domain_lookup_info2 | Lookup info2 | Boolean | Lookup info2 |
| samr_access_mask.domain_open_account | Open account | Boolean | Open account |
| samr_access_mask.domain_set_info1 | Set info1 | Boolean | Set info1 |
| samr_access_mask.domain_set_info2 | Set info2 | Boolean | Set info2 |
| samr_access_mask.domain_set_info3 | Set info3 | Boolean | Set info3 |
| samr_access_mask.domain_unknown_80 | Unknown 0x80 | Boolean | Unknown 0x80 |
| samr_access_mask.group_add_member | Add member | Boolean | Add member |
| samr_access_mask.group_get_members | Get members | Boolean | Get members |
| samr_access_mask.group_lookup_info | Lookup info | Boolean | Lookup info |
| samr_access_mask.group_remove_member | Remove member | Boolean | Remove member |
| samr_access_mask.group_set_info | Get info | Boolean | Get info |
| samr_access_mask.user_change_password | Change password | Boolean | Change password |
| samr_access_mask.user_get_groups | Get groups | Boolean | Get groups |
| samr_access_mask.user_get_locale | Get locale | Boolean | Get locale |
| samr_access_mask.user_get_logoninfo | Get logon info | Boolean | Get logon info |
| samr_access_mask.user_get_name_etc | Get name, etc | Boolean | Get name, etc |
| samr_access_mask.user_set_attributes | Set attributes | Boolean | Set attributes |
| samr_access_mask.user_set_loc_com | Set loc com | Boolean | Set loc com |
| samr_access_mask.user_set_password | Set password | Boolean | Set password |
| samr_access_mask.user_unknown_10 | Unknown 0x10 | Boolean | Unknown 0x10 |
| samr_access_mask.user_unknown_200 | Unknown 0x200 | Boolean | Unknown 0x200 |
| samr_access_mask.user_unknown_400 | Unknown 0x400 | Boolean | Unknown 0x400 |