LsarOpenPolicy2 returns STATUS_ACCESS_DENIED for shares on NetApp filers

[djdkedev]

NetApp filers configuration:
The ONTAP version is 9 and SMBv1, SMBv2 and SMBv3 are enabled by default.

The LocalSecurityAuthorityService.openpolicyhandle() works fine with SMB2 and SMB3 version for shares on Windows but returns "LsarOpenPolicy2 returns STATUS_ACCESS_DENIED" exception for shares on NetApp filers.

Thanks,
Dhananjay

[djdkedev]

Using 0x00020000L READ_CONTROL instead of 'MAXIMUM_ALLOWED' access resolves this issue.

[djdkedev]

The LocalSecurityAuthorityService.openpolicyhandle() should take accessMask as an input parameter.

[djdkedev]

Also, I am getting the following exception for NetShareInfo502 information.
rapid7.client.dcerpc.RPCException: NetrShareEnum returned error code: 5 (ERROR_ACCESS_DENIED)