public static extern NtStatus NtQueryObject(IntPtr objectHandle, OBJECT_INFORMATION_CLASS informationClass, IntPtr informationPtr, uint informationLength, ref uint returnLength);

NtStatus, OBJECT_INFORMATION_CLASS

    NtStatus result;

        if (result == NtStatus.InfoLengthMismatch || result == NtStatus.BufferOverflow || result == NtStatus.BufferTooSmall)

        else if (result == NtStatus.Success || tries > 5)

            //throw new Exception("Unhandled NtStatus " + result);

    if (result == NtStatus.Success)

public static extern NtStatus NtQuerySystemInformation(SYSTEM_INFORMATION_CLASS InfoClass, IntPtr Info, uint Size, out uint Length);

NtStatus, SYSTEM_INFORMATION_CLASS

        if (result == NtStatus.Success)

        if (result != NtStatus.InfoLengthMismatch && result != NtStatus.BufferOverflow && result != NtStatus.BufferTooSmall)

            //throw new Exception("Unhandled NtStatus " + result);

            throw new System.ComponentModel.Win32Exception(((NativeMethods.NtStatus)result).ToString());

public static uint RtlNtStatusToDosError(int Status);

Declare Function RtlNtStatusToDosError Lib "ntdll.dll" (ByVal status as Integer) As UInteger

            throw new System.ComponentModel.Win32Exception(((NativeMethods.NtStatus)result).ToString());

     ChangerGetElementStatus = (EFileDevice.Changer << 16) | (0x0005 << 2) | EMethod.Buffered | (FileAccess.ReadWrite << 14),

     ChangerInitializeElementStatus = (EFileDevice.Changer << 16) | (0x0006 << 2) | EMethod.Buffered | (FileAccess.Read << 14),

If the function fails, the return value is an NTSTATUS code, which can be the following value or one of the LSA Policy Function Return Values.

You can use the LsaNtStatusToWinError function to convert the NTSTATUS code to a Windows error code.

        Throw New Win32Exception(LsaNtStatusToWinError(ret))

        Throw New Win32Exception(LsaNtStatusToWinError(ret))

// NTSTATUS LsaEnumerateAccountRights(

NTSTATUS can be converted to a Windows error using LsaNtStatusToWinError

    'NTSTATUS LsaEnumerateAccountsWithUserRight(

    internal static extern int LsaNtStatusToWinError(int NTSTATUS);

        throw new Win32Exception(Win32Sec.LsaNtStatusToWinError((int)ret));

        throw new Win32Exception(Win32Sec.LsaNtStatusToWinError((int)ret));

        Throw New Win32Exception(LsaNtStatusToWinError(ret))

        Throw New Win32Exception(LsaNtStatusToWinError(ret))

    'NTSTATUS LsaFreeMemory(

    internal static extern int LsaNtStatusToWinError(int NTSTATUS);

        throw new Win32Exception(Win32Sec.LsaNtStatusToWinError((int)ret));

        throw new Win32Exception(Win32Sec.LsaNtStatusToWinError((int)ret));

        throw new Win32Exception(Win32Sec.LsaNtStatusToWinError((int)ret));

        throw new Win32Exception(Win32Sec.LsaNtStatusToWinError((int)ret));

        throw new Win32Exception(Win32Sec.LsaNtStatusToWinError((int)ret));

        throw new Win32Exception(Win32Sec.LsaNtStatusToWinError(ret));

static extern uint LsaNtStatusToWinError(uint status);

    Private Declare Function LsaNtStatusToWinError Lib "advapi32.dll" ( _

        aWinErrorCode = LsaNtStatusToWinError( aOpenPolicyResult );

            aWinErrorCode = LsaNtStatusToWinError( aLSAResult );

            UInt32 winErrorCode = LsaNtStatusToWinError(resultPolicy);

            UInt32 ntstatus = LsaRetrievePrivateData(policy, key, ref result);

            UInt32 winErrorCode = LsaNtStatusToWinError(ntstatus);

            UInt32 ntstatus = LsaStorePrivateData(policy, key, value);

            UInt32 winErrorCode = LsaNtStatusToWinError(ntstatus);

        private static extern UInt32 LsaNtStatusToWinError(UInt32 status);

        Throw New Win32Exception(LsaNtStatusToWinError(ret))

        Throw New Win32Exception(LsaNtStatusToWinError(ret))

    'NTSTATUS LsaRemoveAccountRights(

        Throw New Win32Exception(LsaNtStatusToWinError(ret))

        Throw New Win32Exception(LsaNtStatusToWinError(ret))

    private static extern uint LsaNtStatusToWinError(

        uint winErrorCode = LsaNtStatusToWinError(ntsResult);

        uint winErrorCode = LsaNtStatusToWinError(ntsResult);

        uint winErrorCode = LsaNtStatusToWinError(ntsResult);

        uint winErrorCode = LsaNtStatusToWinError(result);

        uint winErrorCode = LsaNtStatusToWinError(ntsResult);

public enum NtStatus : uint

    MaximumNtStatus = 0xffffffff

Many kernel-mode standard driver routines and driver support routines use the NTSTATUS type for return values. Additionally, drivers provide an NTSTATUS-typed value in an IRP's IO_STATUS_BLOCK structure when completing IRPS.

static extern NTSTATUS HidP_GetCaps(

    /// If the function fails, the return value is an NTSTATUS code. The following are possible error codes.

    internal static extern NtStatus LsaCallAuthenticationPackage(

        out NtStatus ProtocolStatus

private static extern NtStatus LsaEnumerateLogonSessions(out uint LogonSessionCount, out IntPtr LogonSessionList);

public static extern NtStatus LsaFreeReturnBuffer([In] IntPtr buffer);

                public static extern WinErrors LsaNtStatusToWinError(WinStatusCodes status);

                            throw new System.ComponentModel.Win32Exception((int)OSCalls.LsaNtStatusToWinError(status));

                                    throw new System.ComponentModel.Win32Exception((int)OSCalls.LsaNtStatusToWinError(status));

                                    throw new System.ComponentModel.Win32Exception((int)OSCalls.LsaNtStatusToWinError(status));

    public static extern NtStatus LsaRegisterLogonProcess(

    public static PropertyKey PKEY_ContentStatus = new PropertyKey( 0xD5CDD502, 0x2E9C, 0x101B, 0x93, 0x97, 0x08, 0x00, 0x2B, 0x2C, 0xF9, 0xAE, 27);