TOKEN_GROUPS structure (ntifs.h)

TOKEN_GROUPS contains information about the group security identifiers (SID) in an access token.

Syntax

typedef struct _TOKEN_GROUPS {
  ULONG              GroupCount;
#if ...
  SID_AND_ATTRIBUTES *Groups[];
#else
  SID_AND_ATTRIBUTES Groups[ANYSIZE_ARRAY];
#endif
} TOKEN_GROUPS, *PTOKEN_GROUPS;

Members

GroupCount

Specifies the number of groups in the access token.

Groups[*]

Groups[ANYSIZE_ARRAY]

Remarks

You can use SeFilterToken to designate one or more group SIDs as deny-only SIDs. Note that it is also possible to designate a user SID as a deny-only SID by specifying the user SID as one of the group SIDs in the TOKEN_GROUPS structure passed to SeFilterToken.

Requirements

Requirement Value
Header ntifs.h (include Ntifs.h)

See also

SID

SID_AND_ATTRIBUTES

SeFilterToken

SeQueryInformationToken

ZwQueryInformationToken

ZwSetInformationToken