OpenProcessToken
The OpenProcessToken
function opens the access token associated with a process.
BOOL OpenProcessToken(
|
HANDLE ProcessHandle, |
// handle to
process |
|
DWORD DesiredAccess, |
// desired access
to process |
|
PHANDLE TokenHandle |
// pointer to
handle of open access token |
|
); |
|
Parameters
ProcessHandle
Identifies
the process whose access token is opened.
DesiredAccess
Specifies an
access mask that specifies the requested types of access to the access token.
These requested access types are compared with the token s discretionary
access-control list (ACL) to determine which accesses are granted or denied.
The following access rights have been defined for access tokens.
|
Value |
Meaning |
|
TOKEN_ADJUST_DEFAULT |
Required to
change the default ACL, primary group, or owner of an access token. |
|
TOKEN_ADJUST_GROUPS |
Required to
change the groups specified in an access token. |
|
TOKEN_ADJUST_PRIVILEGES |
Required to
change the privileges specified in an access token. |
|
TOKEN_ALL_ACCESS |
Combines
the STANDARD_RIGHTS_REQUIRED standard access rights and all individual access
rights for tokens. |
|
TOKEN_ASSIGN_PRIMARY |
Required to
attach a primary token to a process in addition to the SE_CREATE_TOKEN_NAME
privilege. |
|
TOKEN_DUPLICATE |
Required to
duplicate an access token. |
|
TOKEN_EXECUTE |
Combines
the STANDARD_RIGHTS_EXECUTE standard access rights and the TOKEN_IMPERSONATE
access right. |
|
TOKEN_IMPERSONATE |
Required to
attach an impersonation access token to a process. |
|
TOKEN_QUERY |
Required to
query the contents of an access token. |
|
TOKEN_QUERY_SOURCE |
Required to
query the source of an access token. |
|
TOKEN_READ |
Combines
the STANDARD_RIGHTS_READ standard access rights and the TOKEN_QUERY access
right. |
|
TOKEN_WRITE |
Combines
the STANDARD_RIGHTS_WRITE standard access rights and the TOKEN_ADJUST_PRIVILEGES,
TOKEN_ADJUST_GROUPS, and TOKEN_ADJUST_DEFAULT access rights. |
TokenHandle
Points to a
handle identifying the newly-opened access token when the function returns.
Return Values
If the
function succeeds, the return value is nonzero.
If the
function fails, the return value is zero. To get extended error information,
call GetLastError.
See Also