Platform SDK: Access Control

TOKEN_INFORMATION_CLASS

The TOKEN_INFORMATION_CLASS enumeration type contains values that specify the type of information being assigned to or retrieved from an access token.

The GetTokenInformation function uses these enumerator values to indicate the type of token information to retrieve.

typedef enum _TOKEN_INFORMATION_CLASS { 
  TokenUser = 1, 
  TokenGroups, 
  TokenPrivileges, 
  TokenOwner, 
  TokenPrimaryGroup, 
  TokenDefaultDacl, 
  TokenSource, 
  TokenType, 
  TokenImpersonationLevel, 
  TokenStatistics,
  TokenRestrictedSids,
  TokenSessionId
} TOKEN_INFORMATION_CLASS;

Enumerator Value	Meaning
TokenUser	The buffer receives a TOKEN_USER structure containing the token's user account.
TokenGroups	The buffer receives a TOKEN_GROUPS structure containing the group accounts associated with the token.
TokenPrivileges	The buffer receives a TOKEN_PRIVILEGES structure containing the token's privileges.
TokenOwner	The buffer receives a TOKEN_OWNER structure containing the default owner SID for newly created objects.
TokenPrimaryGroup	The buffer receives a TOKEN_PRIMARY_GROUP structure containing the default primary group SID for newly created objects.
TokenDefaultDacl	The buffer receives a TOKEN_DEFAULT_DACL structure containing the default DACL for newly created objects.
TokenSource	The buffer receives a TOKEN_SOURCE structure containing the source of the token. TOKEN_QUERY_SOURCE access is needed to retrieve this information.
TokenType	The buffer receives a TOKEN_TYPE value indicating whether the token is a primary or impersonation token.
TokenImpersonationLevel	The buffer receives a SECURITY_IMPERSONATION_LEVEL value indicating the impersonation level of the token. If the access token is not an impersonation token, the function fails.
TokenStatistics	The buffer receives a TOKEN_STATISTICS structure containing various token statistics.
TokenRestrictedSids	The buffer receives a TOKEN_GROUPS structure containing the list of restricting SIDs in a restricted token.
TokenSessionId	Terminal Services: The buffer receives a DWORD value that indicates the Terminal Services session identifier associated with the token. If the token is associated with the Terminal Server console session, the session identifier is zero. A nonzero session identifier indicates a Terminal Services client session. In a non-Terminal Services environment, the session identifier is zero.

Requirements

Windows NT/2000: Requires Windows NT 3.1 or later.
Header: Declared in Winnt.h; include Windows.h.

TOKEN_INFORMATION_CLASS

Requirements

See Also