SCALE_OUT_WITNESS,   // Scale-out file server witness
    DFS_WITNESS         // DFS namespace witness
}

public enum WitnessVersion {
    VERSION_1(0x00010001),  // Windows Server 2012
    VERSION_2(0x00020000);  // Windows Server 2012 R2+
    
    private final int version;
    
    WitnessVersion(int version) {
        this.version = version;
    }
    
    public int getValue() { return version; }
}
```

		ACB_NOT_DELEGATED          = 0x00004000, /* 1 = Not delegated */
		ACB_USE_DES_KEY_ONLY       = 0x00008000, /* 1 = Use DES key only */
		ACB_DONT_REQUIRE_PREAUTH   = 0x00010000  /* 1 = Preauth not required */
	} SamrAcctFlags;

	[op(0x01)]
	int SamrCloseHandle([in] policy_handle *handle);

	[op(0x39)]
	int SamrConnect2([in,string,unique] wchar_t *system_name,

        int fid = 0x0000;
        int securityInfo = 0x00000000;
        querySecurityDesc = new NtTransQuerySecurityDesc(mockConfig, fid, securityInfo);

        String result = querySecurityDesc.toString();

        assertNotNull(result);
        assertTrue(result.contains("fid=0x0000"));
        assertTrue(result.contains("securityInformation=0x00000000"));
    }

    @Test

        return Stream.of(
                // Known NT status code - NT_STATUS_UNSUCCESSFUL
                Arguments.of(0xC0000001, "A device attached to the system is not functioning."),
                Arguments.of(0x00000000, "NT_STATUS_SUCCESS"),
                // An error that maps via DOS mapping
                Arguments.of(0x00000002, SmbException.getMessageByCode(0x00000002)),
                // Unknown code → hex string (uppercase)

        assertTrue(newNotification.getTimestamp() <= afterCreation);
    }

    @Test
    void testResourceStateConstants() {
        assertEquals(0x00000000, WitnessNotification.WITNESS_RESOURCE_STATE_UNKNOWN);
        assertEquals(0x00000001, WitnessNotification.WITNESS_RESOURCE_STATE_AVAILABLE);
        assertEquals(0x000000FF, WitnessNotification.WITNESS_RESOURCE_STATE_UNAVAILABLE);

        Encdec.enc_uint32le(0x00000000, blob, 4); // Reserved
        Encdec.enc_uint64le(nanos1601, blob, 8);
        System.arraycopy(clientChallenge, 0, blob, 16, 8);
        Encdec.enc_uint32le(0x00000000, blob, 24); // Unknown
        System.arraycopy(avPairs, 0, blob, 28, avPairsLength);
        Encdec.enc_uint32le(0x00000000, blob, 28 + avPairsLength);

        // Act

        Encdec.enc_uint32le(0x00000000, temp, 4); // Reserved
        Encdec.enc_uint64le(nanos1601, temp, 8);
        System.arraycopy(clientChallenge, 0, temp, 16, 8);
        Encdec.enc_uint32le(0x00000000, temp, 24); // Unknown
        if (avPairs != null) {
            System.arraycopy(avPairs, 0, temp, 28, avPairsLength);
        }
        Encdec.enc_uint32le(0x00000000, temp, 28 + avPairsLength); // mystery bytes!

    /**
     * Witness Protocol Version 1 - Windows Server 2012
     */
    VERSION_1(0x00010001),

    /**
     * Witness Protocol Version 2 - Windows Server 2012 R2 and later
     */
    VERSION_2(0x00020000);

    private final int version;

    /**
     * Creates a new WitnessVersion with the specified version value.
     *
     * @param version the numeric version value
     */

    }

    @Test
    @DisplayName("Should verify fault code value ranges and patterns")
    void testFaultCodeValueRanges() {
        // Standard fault codes (0x00000000 - 0x0000FFFF range)
        assertTrue(DcerpcError.DCERPC_FAULT_OTHER >= 0 && DcerpcError.DCERPC_FAULT_OTHER <= 0x0000FFFF,
                "DCERPC_FAULT_OTHER should be in standard range");

		ACB_NOT_DELEGATED          = 0x00004000, /* 1 = Not delegated */
		ACB_USE_DES_KEY_ONLY       = 0x00008000, /* 1 = Use DES key only */
		ACB_DONT_REQUIRE_PREAUTH   = 0x00010000  /* 1 = Preauth not required */
	} SamrAcctFlags;

	[op(0x01)]
	int SamrCloseHandle([in] policy_handle *handle);

	[op(0x39)]
	int SamrConnect2([in,string,unique] wchar_t *system_name,