Location: Symbol Reference > Functions > JwCreateRestrictedToken Function
function JwCreateRestrictedToken(const DenyUserSIDs: TJwSecurityIdList = nil; const RestrictedUserSIDs: TJwSecurityIdList = nil; const RestrictAllSIDs: Boolean = false; const DisableUserPrivileges: TJwPrivilegeSet = nil; const IntegrityLevel: TJwIntegrityLabelType = iltMedium; const Flags: DWORD = DISABLE_MAX_PRIVILEGE): TJwSecurityToken;
JwCreateRestrictedToken creates a restricted token from the current process.
Remark: The function adapts the token security permission to allow the user access to its resources created with the restricted token (by setting a different token default dacl). This is necessary if you intend to strip away the Administrators group.
The function also sets the integrity level for Vista or above.
If the current process token does not have the Administrators group the function just returns a copy of the current process token.
|
Copyright (c) 2010. All rights reserved.
This help was created by Doc-O-Matic sponsored by toolsfactory software inc. |
|
What do you think about this topic? Send feedback!
|
