SYSTEM_POLICY_INFORMATION

The SYSTEM_POLICY_INFORMATION structure is produced as output or expected as input by the functions

• ZwQuerySystemInformation or NtQuerySystemInformation;
• ZwSetSystemInformation or NtSetSystemInformation;

respectively, when given the information class SystemPolicyInformation (0x86).

Documentation Status

The SYSTEM_POLICY_INFORMATION structure used not to be documented. A C-language definition was added to WINTERNL.H from the Software Development Kit (SDK) for Windows 8.1. It presents the whole structure as arrays named Reserved1 and Reserved2.  This is also how the structure is described in documentation of NtQuerySystemInformation as found online today, 28th October 2016.

Layout

The SYSTEM_POLICY_INFORMATION is 0x14 or 0x20 bytes in 32-bit and 64-bit Windows, respectively.

PVOID InputData;

PVOID OutputData;

ULONG InputDataSize;

ULONG OutputDataSize;

ULONG Version;