NTSTATUS
SeDeassignSecurity(
IN OUT PSECURITY_DESCRIPTOR *SecurityDescriptor
);
SeDeassignSecurity deallocates the memory associated with a security descriptor that was assigned using SeAssignSecurity.
If the deallocation succeeds, SeDeassignSecurity returns STATUS_SUCCESS.
Callers of SeDeassignSecurity must be running at IRQL PASSIVE_LEVEL.