NAME
CreateRestrictedToken (ADVAPI32.@)
SYNOPSIS
BOOL CreateRestrictedToken
(
HANDLE baseToken,
DWORD flags,
DWORD nDisableSids,
PSID_AND_ATTRIBUTES disableSids,
DWORD nDeletePrivs,
PLUID_AND_ATTRIBUTES deletePrivs,
DWORD nRestrictSids,
PSID_AND_ATTRIBUTES restrictSids,
PHANDLE newToken
)
DESCRIPTION
Create a new more restricted token from an existing token.
PARAMS
baseToken [In] Token to base the new restricted token on.
flags [In] Options.
nDisableSids [In] Length of disableSids array.
disableSids [In] Array of SIDs to disable in the new token.
nDeletePrivs [In] Length of deletePrivs array.
deletePrivs [In] Array of privileges to delete in the new token.
nRestrictSids [In] Length of restrictSids array.
restrictSids [In] Array of SIDs to restrict in the new token.
newToken [Out] Address where the new token is stored.
RETURNS
Success: TRUE
Failure: FALSE
IMPLEMENTATION
Declared in "winbase.h".
Implemented in "dlls/advapi32/security.c".
Debug channel "advapi".