| netlogon.command | Command | Unsigned 8-bit integer | NETLOGON Command |
| netlogon.date_time | Date/Time | Unsigned 32-bit integer | NETLOGON Date/Time |
| netlogon.db_count | DB Count | Unsigned 32-bit integer | NETLOGON DB Count |
| netlogon.db_index | Database Index | Unsigned 32-bit integer | NETLOGON Database Index |
| netlogon.domain_name | Domain Name | String | NETLOGON Domain Name |
| netlogon.domain_sid_size | Domain SID Size | Unsigned 32-bit integer | NETLOGON Domain SID Size |
| netlogon.flags.autolock | Autolock | Boolean | NETLOGON Account Autolock |
| netlogon.flags.enabled | Enabled | Boolean | NETLOGON Is This Account Enabled |
| netlogon.flags.expire | Expire | Boolean | NETLOGON Will Account Expire |
| netlogon.flags.homedir | Homedir | Boolean | NETLOGON Homedir Required |
| netlogon.flags.interdomain | Interdomain Trust | Boolean | NETLOGON Inter-domain Trust Account |
| netlogon.flags.mns | MNS User | Boolean | NETLOGON MNS User Account |
| netlogon.flags.normal | Normal User | Boolean | NETLOGON Normal User Account |
| netlogon.flags.password | Password | Boolean | NETLOGON Password Required |
| netlogon.flags.server | Server Trust | Boolean | NETLOGON Server Trust Account |
| netlogon.flags.temp_dup | Temp Duplicate User | Boolean | NETLOGON Temp Duplicate User Account |
| netlogon.flags.workstation | Workstation Trust | Boolean | NETLOGON Workstation Trust Account |
| netlogon.large_serial | Large Serial Number | Unsigned 64-bit integer | NETLOGON Large Serial Number |
| netlogon.lm_token | LM Token | Unsigned 16-bit integer | NETLOGON LM Token |
| netlogon.lmnt_token | LMNT Token | Unsigned 16-bit integer | NETLOGON LMNT Token |
| netlogon.low_serial | Low Serial Number | Unsigned 32-bit integer | NETLOGON Low Serial Number |
| netlogon.mailslot_name | Mailslot Name | String | NETLOGON Mailslot Name |
| netlogon.major_version | Workstation Major Version | Unsigned 8-bit integer | NETLOGON Workstation Major Version |
| netlogon.minor_version | Workstation Minor Version | Unsigned 8-bit integer | NETLOGON Workstation Minor Version |
| netlogon.nt_date_time | NT Date/Time | Date/Time stamp | NETLOGON NT Date/Time |
| netlogon.nt_version | NT Version | Unsigned 32-bit integer | NETLOGON NT Version |
| netlogon.os_version | Workstation OS Version | Unsigned 8-bit integer | NETLOGON Workstation OS Version |
| netlogon.pdc_name | PDC Name | String | NETLOGON PDC Name |
| netlogon.pulse | Pulse | Unsigned 32-bit integer | NETLOGON Pulse |
| netlogon.random | Random | Unsigned 32-bit integer | NETLOGON Random |
| netlogon.request_count | Request Count | Unsigned 16-bit integer | NETLOGON Request Count |
| netlogon.script_name | Script Name | String | NETLOGON Script Name |
| netlogon.server_name | Server Name | String | NETLOGON Server Name |
| netlogon.unicode_computer_name | Unicode Computer Name | String | NETLOGON Unicode Computer Name |
| netlogon.unicode_pdc_name | Unicode PDC Name | String | NETLOGON Unicode PDC Name |
| netlogon.update | Update Type | Unsigned 16-bit integer | NETLOGON Update Type |
| netlogon.user_name | User Name | String | NETLOGON User Name |