windowslocal

package

v1.0.0-beta1 Latest Latest Go to latest Published: Oct 2, 2026 License: Apache-2.0 Imports: 11 Imported by: 0

Details

Rendered for windows/amd64

Package windowslocal provides read-only access to local Windows SAM users.

This section is empty.

View Source

var ErrNotFound = errors.New("local SAM account not found")

func Unavailable(a Account) (bool, error)

Unavailable rejects disabled, locked, and expired local SAM accounts.

func ValidatePassword(a Account, password string) (valid bool, retErr error)

ValidatePassword authenticates against the local SAM, without S4U or a persistent credential. An ordinary logon rejection returns false, nil.

type Account struct {
	Name string
	SID  string
}

Account identifies a local SAM user. Callers must retain both fields when passing an account to Disabled or ValidatePassword.

func Lookup(name string) (Account, error)

Lookup resolves a bare name against this machine's SAM only.

func LookupBySID(value string) (Account, error)

LookupBySID accepts only a SID that resolves back to the local SAM user.

func (a Account) GetField(name string) (any, bool, error)

GetField implements the template context for a local account. Group data includes direct local and BUILTIN aliases, not domain or nested membership.