---
name: "CreateRestrictedToken"
section: "3w"
platform: "linux"
package: "libwine-dev"
version: "1.4.1-4"
release: "Debian 7 (Wheezy)"
platforms: ["linux"]
url: "https://new.carta.tech/CreateRestrictedToken"
---

# CreateRestrictedToken(3w)

## NAME

**CreateRestrictedToken** (ADVAPI32.@)

## SYNOPSIS

BOOL CreateRestrictedToken\
  (\
   HANDLE               *baseToken*,\
   DWORD                *flags*,\
   DWORD                *nDisableSids*,\
   PSID\_AND\_ATTRIBUTES  *disableSids*,\
   DWORD                *nDeletePrivs*,\
   PLUID\_AND\_ATTRIBUTES *deletePrivs*,\
   DWORD                *nRestrictSids*,\
   PSID\_AND\_ATTRIBUTES  *restrictSids*,\
   PHANDLE              *newToken*\
  )

## DESCRIPTION

Create a new more restricted token from an existing token.

## PARAMS

*baseToken* **\[In\]**  Token to base the new restricted token on.

*flags* **\[In\]**  Options.

*nDisableSids* **\[In\]**  Length of *disableSids* array.

*disableSids* **\[In\]**  Array of SIDs to disable in the new token.

*nDeletePrivs* **\[In\]**  Length of *deletePrivs* array.

*deletePrivs* **\[In\]**  Array of privileges to delete in the new token.

*nRestrictSids* **\[In\]**  Length of *restrictSids* array.

*restrictSids* **\[In\]**  Array of SIDs to restrict in the new token.

*newToken* **\[Out\]**  Address where the new token is stored.

## RETURNS

**Success:** **TRUE**

**Failure:** **FALSE**

## IMPLEMENTATION

Declared in **"winbase.h"**.

Implemented in **"dlls/advapi32/security.c"**.

Debug channel **"advapi"**.