CreateRestrictedToken(3w)

Usage

BOOL CreateRestrictedToken
(
HANDLE baseToken,
DWORD flags,
DWORD nDisableSids,
PSID_AND_ATTRIBUTES disableSids,
DWORD nDeletePrivs,
PLUID_AND_ATTRIBUTES deletePrivs,
DWORD nRestrictSids,
PSID_AND_ATTRIBUTES restrictSids,
PHANDLE newToken
)

Overview

Create a new more restricted token from an existing token.

Params

baseToken [In] Token to base the new restricted token on.

flags [In] Options.

nDisableSids [In] Length of disableSids array.

disableSids [In] Array of SIDs to disable in the new token.

nDeletePrivs [In] Length of deletePrivs array.

deletePrivs [In] Array of privileges to delete in the new token.

nRestrictSids [In] Length of restrictSids array.

restrictSids [In] Array of SIDs to restrict in the new token.

newToken [Out] Address where the new token is stored.

Returns

Success: TRUE

Failure: FALSE

Implementation

Declared in "winbase.h".

Implemented in "dlls/advapi32/security.c".

Debug channel "advapi".

Releases

3 releases since Debian 5.0 (Lenny); the text changed 2 times.