YourPhone.Devices.Managed

Manages per-device CNG encryption keys for SQLite database encryption. Each device gets a named AES-256 key persisted in the Windows CNG Microsoft Software Key Storage Provider under the name cd_k_{deviceId}. The key material is exportable so it can be passed to the SQLite Encryption Extension via sqlite3_key. Transient vs permanent failures: CngKey.Open (which uses NCryptOpenKey) can throw NTE_BAD_KEYSET even when the key still exists — for example during a transient OS authentication issue. To distinguish this from a truly missing key (e.g. user profile rebuilt), we fall back to NCryptEnumKeys which uses a different code path and can succeed when NCryptOpenKey fails. See KeyManager.GetExistingKey in YourPhone.YPP.Auth for the same pattern.

Returns the 256-bit AES key used to encrypt this device's SQLite databases. Creates the key on first call. On NTE_BAD_KEYSET, distinguishes transient failures (rethrows) from permanently missing keys (creates a new one — existing encrypted databases will be recreated via the corruption-recovery path in ).

Deletes the persisted CNG database key for this device. After this call, will create a new key. Existing databases encrypted with the old key will be unreadable and will be recreated via corruption recovery.

Checks whether a CNG key exists by enumerating all keys in the Microsoft Software KSP. Uses NCryptEnumKeys — a different code path from NCryptOpenKey (used by and ). The enumeration can succeed even when Open/Exists fail transiently with NTE_BAD_KEYSET.

In fulltrust, we keep the process alive if a device is setup to maintain connection.

InitializeComponent()

Connect()

GetBindingConnector(int connectionId, object target)

InitializeComponent()

Connect()

GetBindingConnector(int connectionId, object target)

InitializeComponent()

Connect()

GetBindingConnector(int connectionId, object target)

InitializeComponent()

Connect()

GetBindingConnector(int connectionId, object target)

Opens (or reuses) an encrypted SQLite database for this device. Connection lifecycle: connections are ref-counted and cached per . The first caller creates the connection; subsequent callers get an additional reference to the same instance. When the last reference is disposed, the connection is closed and the cache entry is removed. Encryption: every connection is opened with the device's CNG-managed database key (see ). For databases created before encryption was added, the constructor detects the unencrypted file and opens it without a key for immediate access. After the has run (ensuring the schema exists), is fire-and-forgot to migrate the file to an encrypted copy in the background. See class docs for the full encryption, migration, and corruption-recovery lifecycle.

In-memory implementation of IDeviceDataContainer that doesn't persist to storage. Used when a device is detached from its storage container.

This property should only be set when we are not able to match the remote device's account to an existing account on Windows. This allows us to prompt the user to re-enter creds for this account, specifically. Once the account has been authenticated and we have an AccountId, this property will be cleared.

Note: Don't use the setter directly if setting value programmatically. See

Updates either from transient state or disk

The transient state

Needed to prevent doing unnecessary work when setting the underlying value programmatically.

Raised when the phone starts ringing (sound starts playing) or stops ringing (sound stops playing and the button reverts to its play sound state). The view listens to this event to make Narrator announce the change.

Narrator announcement text describing the current ringing state of the indicator.

InitializeComponent()

Connect()

GetBindingConnector(int connectionId, object target)

The Dependency property backing the ViewModel property

InitializeComponent()

Connect()

GetBindingConnector(int connectionId, object target)

InitializeComponent()

Connect()

GetBindingConnector(int connectionId, object target)

InitializeComponent()

UnloadObject(DependencyObject)

Connect()

DisconnectUnloadedObject(int connectionId)

GetBindingConnector(int connectionId, object target)

The Dependency property backing the ViewModel property

InitializeComponent()

Connect()

GetBindingConnector(int connectionId, object target)

InitializeComponent()

Connect()

GetBindingConnector(int connectionId, object target)

The Dependency property backing the ViewModel property

InitializeComponent()

UnloadObject(DependencyObject)

Connect()

DisconnectUnloadedObject(int connectionId)

GetBindingConnector(int connectionId, object target)

InitializeComponent()

Connect()

GetBindingConnector(int connectionId, object target)

The Dependency property backing the ViewModel property

InitializeComponent()

UnloadObject(DependencyObject)

Connect()

DisconnectUnloadedObject(int connectionId)

GetBindingConnector(int connectionId, object target)

InitializeComponent()

Connect()

GetBindingConnector(int connectionId, object target)

Defines the source generated JSON serialization contract metadata for a given type.

The default associated with a default instance.

The source-generated options associated with this context.

Main class for providing metadata for the app or library

GetXamlType(Type)

GetXamlType(String)

GetXmlnsDefinitions()

The **HRESULT** data type is the same as the [SCODE](scode.md) data type. An **HRESULT** value consists of the following fields: - A 1-bit code indicating severity, where zero represents success and 1 represents failure. - A 4-bit reserved value. - An 11-bit code indicating responsibility for the error or warning, also known as a facility code. - A 16-bit code describing the error or warning. Most MAPI interface methods and functions return **HRESULT** values to provide detailed cause formation. **HRESULT** values are also used widely in OLE interface methods. OLE provides several macros for converting between **HRESULT** values and **SCODE** values, another common data type for error handling. > [!NOTE] > In 64-bit MAPI, **HRESULT** is still a 32-bit value. For information about the OLE use of **HRESULT** values, see the *OLE Programmer's Reference*. For more information about the use of these values in MAPI, see [Error Handling](error-handling-in-mapi.md) and any of the following interface methods: [IABLogon::GetLastError](iablogon-getlasterror.md) [IMAPISupport::GetLastError](imapisupport-getlasterror.md) [IMAPIControl::GetLastError](imapicontrol-getlasterror.md) [IMAPITable::GetLastError](imapitable-getlasterror.md) [IMAPIProp::GetLastError](imapiprop-getlasterror.md) [IMAPIViewAdviseSink::OnPrint](imapiviewadvisesink-onprint.md) Read more on docs.microsoft.com. A pointer to the IErrorInfo interface that provides more information about the error. You can specify to use the current IErrorInfo interface, or new IntPtr(-1) to ignore the current IErrorInfo interface and construct the exception just from the error code. , if it does not reflect an error.

Documentation varies per use. Refer to each: IMbnConnectionContextEvents.OnSetProvisionedContextComplete, IMbnConnectionEvents.OnConnectComplete, IMbnPinEvents.OnChangeComplete, IMbnPinEvents.OnDisableComplete, IMbnPinEvents.OnEnableComplete, IMbnPinEvents.OnEnterComplete, IMbnPinEvents.OnUnblockComplete, IMbnPinManagerEvents.OnGetPinStateComplete, IMbnRadioEvents.OnSetSoftwareRadioStateComplete, IMbnServiceActivationEvents.OnActivationComplete, IMbnSmsEvents.OnSetSmsConfigurationComplete, IMbnSmsEvents.OnSmsDeleteComplete, IMbnSmsEvents.OnSmsReadComplete, IMbnSmsEvents.OnSmsSendComplete.

The LUID structure is an opaque structure that specifies an identifier that is guaranteed to be unique on the local machine. For more information, see the reference page for LUID in the Microsoft Windows SDK documentation.

Learn more about this API from docs.microsoft.com.

A pointer to a null-terminated, constant character string.

A pointer to the first character in the string. The content should be considered readonly, as it was typed as constant in the SDK.

Gets the number of characters up to the first null character (exclusive).

Returns a with a copy of this character array, up to the first null character (exclusive).

A , or if is .

Returns a span of the characters in this string, up to the first null character (exclusive).

Used to contain information about a CNG key.

Learn more about this API from docs.microsoft.com.

A pointer to a null-terminated Unicode string that contains the name of the key.

A pointer to a null-terminated Unicode string that contains the identifier of the cryptographic algorithm that the key was created with. This can be one of the standard CNG Algorithm Identifiers or the identifier for another registered algorithm.

A set of flags that provide more information about the key. This can be zero or the following value. This doc was truncated. Read more on docs.microsoft.com.

Represents a locally unique identifier (LUID) and its attributes.

An LUID_AND_ATTRIBUTES structure can represent an LUID whose attributes change frequently, such as when the LUID is used to represent privileges in the PRIVILEGE_SET structure. Privileges are represented by LUIDs and have attributes indicating whether they are currently enabled or disabled.

Specifies an LUID value.

Specifies attributes of the LUID. This value contains up to 32 one-bit flags. Its meaning is dependent on the definition and use of the LUID.

Contains information about a set of privileges for an access token.

Learn more about this API from docs.microsoft.com.

This must be set to the number of entries in the Privileges array.

Specifies an array of LUID_AND_ATTRIBUTES structures. Each structure contains the LUID and attributes of a privilege. To get the name of the privilege associated with a LUID, call the LookupPrivilegeName function, passing the address of the LUID as the value of the lpLuid parameter.

Important The constant ANYSIZE_ARRAY is defined as 1 in the public header Winnt.h. To create this array with more than one element, you must allocate sufficient memory for the structure to take into account additional elements.

Read more on docs.microsoft.com.

Computes the amount of memory that must be allocated to store this struct, including the specified number of elements in the variable length inline array at the end.

Represents a Win32 handle that can be closed with .

Contains extern methods from "ADVAPI32.dll". Contains extern methods from "KERNEL32.dll". Contains extern methods from "ncrypt.dll". Contains extern methods from "POWRPROF.dll". Contains extern methods from "USER32.dll".

Opens the access token associated with a process.

A handle to the process whose access token is opened. The process must have the PROCESS_QUERY_LIMITED_INFORMATION access permission. See [Process Security and Access Rights](/windows/win32/procthread/process-security-and-access-rights) for more info. Specifies an access mask that specifies the requested types of access to the access token. These requested access types are compared with the discretionary access control list (DACL) of the token to determine which accesses are granted or denied. For a list of access rights for access tokens, see Access Rights for Access-Token Objects. Read more on docs.microsoft.com. A pointer to a handle that identifies the newly opened access token when the function returns. If the function succeeds, the return value is nonzero. If the function fails, the return value is zero. To get extended error information, call GetLastError. To get a handle to an elevated process from within a non-elevated process, both processes must be started from the same account. If the process being checked was started by a different account, the checking process needs to have the SE_DEBUG_NAME privilege enabled. See [Privilege Constants (Authorization)](/windows/win32/secauthz/privilege-constants) for more info. To close the access token handle returned through the TokenHandle parameter, call CloseHandle. Read more on docs.microsoft.com.

Enables or disables privileges in the specified access token. Enabling or disabling privileges in an access token requires TOKEN_ADJUST_PRIVILEGES access.

A handle to the access token that contains the privileges to be modified. The handle must have TOKEN_ADJUST_PRIVILEGES access to the token. If the PreviousState parameter is not NULL, the handle must also have TOKEN_QUERY access. Specifies whether the function disables all of the token's privileges. If this value is TRUE, the function disables all privileges and ignores the NewState parameter. If it is FALSE, the function modifies privileges based on the information pointed to by the NewState parameter. A pointer to a TOKEN_PRIVILEGES structure that specifies an array of privileges and their attributes. If the DisableAllPrivileges parameter is FALSE, the AdjustTokenPrivileges function enables, disables, or removes these privileges for the token. The following table describes the action taken by the AdjustTokenPrivileges function, based on the privilege attribute. This doc was truncated. Read more on docs.microsoft.com. Specifies the size, in bytes, of the buffer pointed to by the PreviousState parameter. This parameter can be zero if the PreviousState parameter is NULL. A pointer to a buffer that the function fills with a TOKEN_PRIVILEGES structure that contains the previous state of any privileges that the function modifies. That is, if a privilege has been modified by this function, the privilege and its previous state are contained in the TOKEN_PRIVILEGES structure referenced by PreviousState. If the PrivilegeCount member of TOKEN_PRIVILEGES is zero, then no privileges have been changed by this function. This parameter can be NULL. If you specify a buffer that is too small to receive the complete list of modified privileges, the function fails and does not adjust any privileges. In this case, the function sets the variable pointed to by the ReturnLength parameter to the number of bytes required to hold the complete list of modified privileges. Read more on docs.microsoft.com. A pointer to a variable that receives the required size, in bytes, of the buffer pointed to by the PreviousState parameter. This parameter can be NULL if PreviousState is NULL. If the function succeeds, the return value is nonzero. To determine whether the function adjusted all of the specified privileges, call GetLastError, which returns one of the following values when the function succeeds: This doc was truncated. The AdjustTokenPrivileges function cannot add new privileges to the access token. It can only enable or disable the token's existing privileges. To determine the token's privileges, call the GetTokenInformation function. The NewState parameter can specify privileges that the token does not have, without causing the function to fail. In this case, the function adjusts the privileges that the token does have and ignores the other privileges so that the function succeeds. Call the GetLastError function to determine whether the function adjusted all of the specified privileges. The PreviousState parameter indicates the privileges that were adjusted. The PreviousState parameter retrieves a TOKEN_PRIVILEGES structure that contains the original state of the adjusted privileges. To restore the original state, pass the PreviousState pointer as the NewState parameter in a subsequent call to the AdjustTokenPrivileges function. Read more on docs.microsoft.com.

Retrieves the locally unique identifier (LUID) used on a specified system to locally represent the specified privilege name. (Unicode)

A pointer to a null-terminated string that specifies the name of the system on which the privilege name is retrieved. If a null string is specified, the function attempts to find the privilege name on the local system. A pointer to a null-terminated string that specifies the name of the privilege, as defined in the Winnt.h header file. For example, this parameter could specify the constant, SE_SECURITY_NAME, or its corresponding string, "SeSecurityPrivilege". A pointer to a variable that receives the LUID by which the privilege is known on the system specified by the lpSystemName parameter. If the function succeeds, the function returns nonzero. If the function fails, it returns zero. To get extended error information, call GetLastError. The LookupPrivilegeValue function supports only the privileges specified in the Defined Privileges section of Winnt.h. For a list of values, see Privilege Constants.

Closes an open object handle.

A valid handle to an open object. If the function succeeds, the return value is nonzero. If the function fails, the return value is zero. To get extended error information, call GetLastError. If the application is running under a debugger, the function will throw an exception if it receives either a handle value that is not valid or a pseudo-handle value. This can happen if you close a handle twice, or if you call CloseHandle on a handle returned by the FindFirstFile function instead of calling the FindClose function. The CloseHandle function closes handles to the following objects: This doc was truncated. Read more on docs.microsoft.com.

Retrieves a pseudo handle for the current process.

The return value is a pseudo handle to the current process. A pseudo handle is a special constant, currently (HANDLE)-1, that is interpreted as the current process handle. For compatibility with future operating systems, it is best to call GetCurrentProcess instead of hard-coding this constant value. The calling process can use a pseudo handle to specify its own process whenever a process handle is required. Pseudo handles are not inherited by child processes. This handle has the PROCESS_ALL_ACCESS access right to the process object. For more information, see Process Security and Access Rights. Windows Server 2003 and Windows XP: This handle has the maximum access allowed by the security descriptor of the process to the primary token of the process. A process can create a "real" handle to itself that is valid in the context of other processes, or that can be inherited by other processes, by specifying the pseudo handle as the source handle in a call to the DuplicateHandle function. A process can also use the OpenProcess function to open a real handle to itself. The pseudo handle need not be closed when it is no longer needed. Calling the CloseHandle function with a pseudo handle has no effect. If the pseudo handle is duplicated by DuplicateHandle, the duplicate handle must be closed. Read more on docs.microsoft.com.

Frees a CNG key storage object.

The handle of the object to free. This can be either a provider handle (NCRYPT_PROV_HANDLE) or a key handle (NCRYPT_KEY_HANDLE). Returns a status code that indicates the success or failure of the function. Possible return codes include, but are not limited to, the following. This doc was truncated. A service must not call this function from its StartService Function. If a service calls this function from its StartService function, a deadlock can occur, and the service may stop responding.

Loads and initializes a CNG key storage provider.

A pointer to a NCRYPT_PROV_HANDLE variable that receives the provider handle. When you have finished using this handle, release it by passing it to the NCryptFreeObject function. A pointer to a null-terminated Unicode string that identifies the key storage provider to load. This is the registered alias of the key storage provider. This parameter is optional and can be NULL. If this parameter is NULL, the default key storage provider is loaded. The following values identify the built-in key storage providers. This doc was truncated. Read more on docs.microsoft.com. Flags that modify the behavior of the function. No flags are defined for this function. Returns a status code that indicates the success or failure of the function. Possible return codes include, but are not limited to, the following. This doc was truncated. In the case that an error condition is returned, the provider will have been unloaded from memory. Functions within the provider must not be called after a failure error is returned. A service must not call this function from its StartService Function. If a service calls this function from its StartService function, a deadlock can occur, and the service may stop responding. Read more on docs.microsoft.com.

Obtains the names of the keys that are stored by the provider.

The handle of the key storage provider to enumerate the keys for. This handle is obtained with the NCryptOpenStorageProvider function. This parameter is not currently used and must be NULL. The address of a pointer to an NCryptKeyName structure that receives the name of the retrieved key. When the application has finished using this memory, free it by calling the NCryptFreeBuffer function. The address of a VOID pointer that receives enumeration state information that is used in subsequent calls to this function. This information only has meaning to the key storage provider and is opaque to the caller. The key storage provider uses this information to determine which item is next in the enumeration. If the variable pointed to by this parameter contains NULL, the enumeration is started from the beginning. When this memory is no longer needed, it must be freed by passing this pointer to the NCryptFreeBuffer function. Read more on docs.microsoft.com. Returns a status code that indicates the success or failure of the function. Possible return codes include, but are not limited to, the following. This doc was truncated. This function retrieves only one item each time it is called. The state of the enumeration is stored in the variable pointed to by the ppEnumState parameter, so this must be preserved between calls to this function. When the last key stored by the provider has been retrieved, this function will return NTE_NO_MORE_ITEMS the next time it is called. To start the enumeration over, set the variable pointed to by the ppEnumState parameter to NULL, free the memory pointed to by the ppKeyName parameter, if it is not NULL, and call this function again. A service must not call this function from its StartService Function. If a service calls this function from its StartService function, a deadlock can occur, and the service may stop responding. Read more on docs.microsoft.com.

Releases a block of memory allocated by a CNG key storage provider.

The address of the memory to be released. Returns a status code that indicates the success or failure of the function. Possible return codes include, but are not limited to, the following. This doc was truncated. A service must not call this function from its StartService Function. If a service calls this function from its StartService function, a deadlock can occur, and the service may stop responding.

Suspends the system by shutting power down. Depending on the Hibernate parameter, the system either enters a suspend (sleep) state or hibernation (S4).

If this parameter is TRUE, the system hibernates. If the parameter is FALSE, the system is suspended. Read more on docs.microsoft.com. This parameter has no effect. If this parameter is TRUE, the system disables all wake events. If the parameter is FALSE, any system wake events remain enabled. Read more on docs.microsoft.com. If the function succeeds, the return value is nonzero. If the function fails, the return value is zero. To get extended error information, call GetLastError. The calling process must have the SE_SHUTDOWN_NAME privilege. To enable the SE_SHUTDOWN_NAME privilege, use the AdjustTokenPrivileges function. For more information, see Changing Privileges in a Token. An application may use SetSuspendState to transition the system from the working state to the standby (sleep), or optionally, hibernate (S4) state. This function is similar to the SetSystemPowerState function. For more information on using PowrProf.h, see Power Schemes. For information about events that can wake the system, see System Wake-up Events. Read more on docs.microsoft.com.

Locks the workstation's display.

If the function succeeds, the return value is nonzero. Because the function executes asynchronously, a nonzero return value indicates that the operation has been initiated. It does not indicate whether the workstation has been successfully locked. If the function fails, the return value is zero. To get extended error information, call GetLastError. The LockWorkStation function is callable only by processes running on the interactive desktop. In addition, the user must be logged on, and the workstation cannot already be locked. Common reasons the workstation might not be locked even if the function succeeds include the following: no user is logged on, the workstation is already locked, the process is not running on the interactive desktop, or the request is denied by the Graphical Identification and Authentication (GINA) DLL. This function has the same result as pressing Ctrl+Alt+Del and clicking Lock. To unlock the workstation, the user must log in. There is no function you can call to determine whether the workstation is locked. To receive a notification when the user locks the workstation or logs in, use the WTSRegisterSessionNotification function to receive WM_WTSSESSION_CHANGE messages. You can use session notifications to track the desktop state so you know whether it is possible to interact with the user. Read more on docs.microsoft.com.

Logs off the interactive user, shuts down the system, or shuts down and restarts the system.

The reason for initiating the shutdown. This parameter must be one of the system shutdown reason codes. If this parameter is zero, the SHTDN_REASON_FLAG_PLANNED reason code will not be set and therefore the default action is an undefined shutdown that is logged as "No title for this reason could be found". By default, it is also an unplanned shutdown. Depending on how the system is configured, an unplanned shutdown triggers the creation of a file that contains the system state information, which can delay shutdown. Therefore, do not use zero for this parameter. Read more on docs.microsoft.com. If the function succeeds, the return value is nonzero. Because the function executes asynchronously, a nonzero return value indicates that the shutdown has been initiated. It does not indicate whether the shutdown will succeed. It is possible that the system, the user, or another application will abort the shutdown. If the function fails, the return value is zero. To get extended error information, call GetLastError. The ExitWindowsEx function returns as soon as it has initiated the shutdown process. The shutdown or logoff then proceeds asynchronously. The function is designed to stop all processes in the caller's logon session. Therefore, if you are not the interactive user, the function can succeed without actually shutting down the computer. If you are not the interactive user, use the InitiateSystemShutdown or InitiateSystemShutdownEx function. A non-zero return value does not mean the logoff was or will be successful. The shutdown is an asynchronous process, and it can occur long after the API call has returned, or not at all. Even if the timeout value is zero, the shutdown can still be aborted by applications, services, or even the system. The non-zero return value indicates that the validation of the rights and parameters was successful and that the system accepted the shutdown request. When this function is called, the caller must specify whether or not applications with unsaved changes should be forcibly closed. If the caller chooses not to force these applications to close and an application with unsaved changes is running on the console session, the shutdown will remain in progress until the user logged into the console session aborts the shutdown, saves changes, closes the application, or forces the application to close. During this period, the shutdown may not be aborted except by the console user, and another shutdown may not be initiated. Calling this function with the value of the uFlags parameter set to EWX_FORCE avoids this situation. Remember that doing this may result in loss of data. To set a shutdown priority for an application relative to other applications in the system, use the SetProcessShutdownParameters function. During a shutdown or log-off operation, running applications are allowed a specific amount of time to respond to the shutdown request. If this time expires before all applications have stopped, the system displays a user interface that allows the user to forcibly shut down the system or to cancel the shutdown request. If the EWX_FORCE value is specified, the system forces running applications to stop when the time expires. If the EWX_FORCEIFHUNG value is specified, the system forces hung applications to close and does not display the dialog box. Console processes receive a separate notification message, CTRL_SHUTDOWN_EVENT or CTRL_LOGOFF_EVENT, as the situation warrants. A console process routes these messages to its HandlerRoutine function. ExitWindowsEx sends these notification messages asynchronously; thus, an application cannot assume that the console notification messages have been handled when a call to ExitWindowsEx returns. To shut down or restart the system, the calling process must use the AdjustTokenPrivileges function to enable the SE_SHUTDOWN_NAME privilege. For more information, see Running with Special Privileges. Read more on docs.microsoft.com.