Note

Access to this page requires authorization. You can try signing in or .

Access to this page requires authorization. You can try .

TOKEN_ACCESS_INFORMATION structure (ntifs.h)

The TOKEN_ACCESS_INFORMATION structure specifies all the information in a token that is necessary to perform an access check.

Syntax

typedef struct _TOKEN_ACCESS_INFORMATION {
 PSID_AND_ATTRIBUTES_HASH SidHash;
 PSID_AND_ATTRIBUTES_HASH RestrictedSidHash;
 PTOKEN_PRIVILEGES Privileges;
 LUID AuthenticationId;
 TOKEN_TYPE TokenType;
 SECURITY_IMPERSONATION_LEVEL ImpersonationLevel;
 TOKEN_MANDATORY_POLICY MandatoryPolicy;
 ULONG Flags;
 ULONG AppContainerNumber;
 PSID PackageSid;
 PSID_AND_ATTRIBUTES_HASH CapabilitiesHash;
 PSID TrustLevelSid;
 PSECURITY_ATTRIBUTES_OPAQUE SecurityAttributes;
} TOKEN_ACCESS_INFORMATION, *PTOKEN_ACCESS_INFORMATION;

Members

SidHash

Pointer to a SID_AND_ATTRIBUTES_HASH structure that specifies a hash of the token's security identifier (SID).

RestrictedSidHash

Pointer to a SID_AND_ATTRIBUTES_HASH structure that specifies a hash of the token's restricted SID.

Privileges

Pointer to a TOKEN_PRIVILEGES structure that specifies information about the token's privileges.

AuthenticationId

A LUID structure that specifies the token's identity.

TokenType

A TOKEN_TYPE enumeration value that specifies the token's type.

ImpersonationLevel

A SECURITY_IMPERSONATION_LEVEL enumeration value that specifies the token's impersonation level.

MandatoryPolicy

A TOKEN_MANDATORY_POLICY structure that specifies the token's mandatory integrity policy.

Flags

Reserved. Must be set to zero.

AppContainerNumber

The app container number for the token or zero if this is not an app container token.

PackageSid

The app container SID or NULL if this is not an app container token.

CapabilitiesHash

Pointer to a SID_AND_ATTRIBUTES_HASH structure that specifies a hash of the token's capability SIDs.

TrustLevelSid

Pointer to a SID value that specifies the protected process trust level of the token.

SecurityAttributes

Reserved. Must be set to NULL.

Requirements

Requirement Value
Minimum supported client Windows 2000
Header ntifs.h

See also

SeAccessCheckFromState


Feedback

Was this page helpful?

Additional resources