Runic.Platform.Administration.Windows

Classification of an operational Windows administration failure.

The domain defining a native error number.

An operational failure retaining the original Windows error identity.

Curated Active Directory operations built on explicit, protected LDAP access.

AD group scope.

Native computer domain role.

LDAP authentication mechanism.

Explicit directory endpoint and bounded connection behavior. Credentials are supplied separately.

An explicit modification retaining LDAP multi-value semantics.

An LDAP attribute modification operation.

LDAP filter and distinguished-name escaping are deliberately separate operations.

An immutable directory object; attribute names compare without case.

A paged search specification with explicit requested attributes.

Scope of an LDAP search.

Transport protection for LDAP. Certificate validation is never bypassed.

A typed LDAP attribute value.

A directory binary value, including GUIDs and SIDs.

A directory text value.

A controller returned by Windows domain discovery.

Machine join state.

Machine join information; Name identifies either the domain or workgroup.

Explicit LDAP operations with typed values and no ADSI runtime COM dependency.

Native machine membership and controller discovery, without ADSI.

Typed DNS record data. Unsupported native types retain their original textual representation.

IPv4 address record.

IPv6 address record.

Canonical name record.

Mail exchange record.

Name-server record.

Reverse lookup pointer.

Service location record.

DNS provider descriptive text, preserving its native quoted-string representation.

An unsupported native record; inspection preserves text, while mutations reject it.

Record identity within the client's server. TTL is configuration, not record identity.

A DNS record with its native class and TTL.

Creates a single record without replacing its record set.

Selected record edits. Data must retain the existing record type; null preserves a value.

DNS zone metadata read from a specific Windows DNS server.

Windows DNS server administration through its MicrosoftDNS provider.

Firewall rule action.

Firewall rule direction.

Windows Firewall profile flags.

Read-only profile policy, including native local-policy modification state.

Observed native identity fields, not a display label or an invented persistent GUID.

Curated rule fields. Updates retain additional native fields not represented here.

Creates a local firewall rule. Name is the native rule name; Description is explanatory display text.

Selected edits; null leaves a property unchanged. Rule names are not renamed by updates.

Local firewall administration, replaceable by application-owned fakes.

Local Windows Firewall administration using generated native bindings and the caller's privileges.

A selected filesystem backup, without backup-selection heuristics.

Import options for an explicitly selected backup and destination GPO.

A direct GPO link. Order 1 is highest precedence.

A GPMC operation failure retaining all status messages returned by the component.

A completed GPMC operation and its status messages.

A native permission, including custom levels not exposed as grant presets.

GPMC permission levels supported for grants.

Native report format.

A GPO identified by GUID, independently of its non-unique display name.

A GPMC operation message with its native status identity.

GPMC operations for an explicit domain and controller, using the caller's Windows identity.

Read-only local Network List Manager access.

Windows network category.

Static native Network List Manager bindings, without the legacy interop assembly.

Network List Manager identity and connectivity; native flags retain IPv4/IPv6 distinctions.

Read-only process inspection, replaceable by application-owned fakes.

A process observed in a point-in-time Toolhelp snapshot.

Read-only local process inspection. Instances retain no native resources.

A failure action and its delay.

Recovery action after service failure.

Failure recovery configuration. Null reset period means never reset.

Configuration and status read from Windows. BinaryCommandLine includes arguments.

Creates a Win32 own-process service. Credentials are passed separately and are never part of this model.

Start configuration of a Windows service.

Native service lifecycle state.

Service state observed at a moment in time.

Service enumeration row; detailed configuration is retrieved separately.

Selected service edits. Null leaves a field unchanged. Multi-field native changes are not transactional.

Explicit local or remote Service Control Manager access using the current Windows identity.

A share's configuration and optional stored self-relative security descriptor, separate from filesystem permissions.

Creates a disk share with an explicit self-relative share security descriptor. Filesystem permissions remain separate.

An SMB share enumeration row.

Selected share edits. Path/type are intentionally not rewritten by metadata/security updates.

Local or remote SMB share administration using generated NetAPI bindings and the current Windows identity.

Shell-link operations, replaceable by application-owned fakes.

Icon location and zero-based index (or negative resource identifier).

Shell link window presentation values supported by IShellLink.

The filesystem fields read from a shell link without resolving its target.

A new shell link. TargetPath is required; no parent directory is created implicitly.

Selected shell-link edits. Null leaves a field unchanged; empty clears a string field.

Local shell-link operations, executed on an owned COM apartment without a desktop owner.

Read-only local machine inventory.

BIOS information from an SMBIOS type-0 structure, without WMI.

OS version and raw registry labels. RegistryProductName is a compatibility label and can say Windows 10 on Windows 11.

Local machine information through Windows APIs and read-only registry access.

Boot trigger.

Daily calendar trigger.

Event trigger with a Windows event subscription query.

Idle trigger.

Logon trigger; null user applies to any user.

Monthly calendar trigger using explicit month numbers and days (1-31).

Registration trigger.

A task instance started by the scheduler; registration is not proof of successful execution.

A registered task and its complete native XML, preserving unsupported settings.

Typed task creation settings. Native XML import supports additional settings and action kinds.

Task Scheduler observed state.

Selected task edits. Null preserves the corresponding native XML subtree.

Session-state trigger.

Executable task action.

Task Scheduler logon identity mode.

Task identity. Passwords are supplied only to registration operations.

Supported session changes.

Common trigger settings. Boundaries use the Task Scheduler date/time format, including optional timezone offset.

One-time trigger. A start boundary is required.

Weekly calendar trigger.

Task Scheduler operations using the current Windows identity on an explicit local or remote computer.