3.1.5.8.4 SamrAddMemberToAlias (Opnum 31)

The SamrAddMemberToAlias method adds a member to an alias.

 long SamrAddMemberToAlias(
   [in] SAMPR_HANDLE AliasHandle,
   [in] PRPC_SID MemberId
 );

AliasHandle: An RPC context handle, as specified in section 2.2.7.2, representing an alias object.

MemberId: The SID of an account to add to the alias.

This protocol asks the RPC runtime, via the strict_context_handle attribute, to reject the use of context handles created by a method of a different RPC interface than this one, as specified in [MS-RPCE] section 3.

Upon receiving this message, the server MUST process the data from the message subject to the following constraints:

1. The server MUST return an error if AliasHandle.HandleType is not equal to "Alias".

2. AliasHandle.GrantedAccess MUST have the required access specified in section 3.1.2.2 Otherwise, the server MUST return STATUS_ACCESS_DENIED.

3. All database operations MUST occur in a single transaction.

4. Let A be the alias referenced by AliasHandle.Object.

5. If the ___domain prefix of MemberId is the same ___domain prefix as the account ___domain and there is no object whose objectSid attribute is MemberId, the server MUST return an error.

6. If A's member attribute already has a dsname value that references the object whose objectSid is MemberId, the server MUST return an error.

7. A's member attribute MUST be updated to add a dsname value that references the object with the objectSid value MemberId.