NAME¶

CreateRestrictedToken (ADVAPI32.@)

SYNOPSIS¶

BOOL CreateRestrictedToken
(
HANDLE baseToken,
DWORD flags,
DWORD nDisableSids,
PSID_AND_ATTRIBUTES disableSids,
DWORD nDeletePrivs,
PLUID_AND_ATTRIBUTES deletePrivs,
DWORD nRestrictSids,
PSID_AND_ATTRIBUTES restrictSids,
PHANDLE newToken
)

DESCRIPTION¶

Create a new more restricted token from an existing token.

PARAMS¶

baseToken [In] Token to base the new restricted token on. flags [In] Options. nDisableSids [In] Length of disableSids array. disableSids [In] Array of SIDs to disable in the new token. nDeletePrivs [In] Length of deletePrivs array. deletePrivs [In] Array of privileges to delete in the new token. nRestrictSids [In] Length of restrictSids array. restrictSids [In] Array of SIDs to restrict in the new token. newToken [Out] Address where the new token is stored.

RETURNS¶

Success: TRUE Failure: FALSE

IMPLEMENTATION¶

Declared in "winbase.h". Implemented in "dlls/advapi32/security.c". Debug channel "advapi".