Listing Account Privileges

• Microsoft Win32 Application Programming Interface (API) included with:

      - Microsoft Windows NT versions 3.1 and 3.5
  

SUMMARY

When a user starts a process, that process takes on the security attributes of the user. The security attributes inherited from the user include privileges, which control access to system services.

MORE INFORMATION

To list the privileges belonging to a process (and thus to the current user), perform the following steps:

1. Call GetCurrentProcess() to obtain a handle to the current process.

2. Call GetProcessToken() to obtain the process' access token.

3. Call GetTokenInformation() to obtain the list of privileges (among other information).

4. Step through the list of privileges, using LookupPrivilegeName() and LookupPrivilegeDisplayName() to obtain the names for the program to display.

Sample Code

   #include <windows.h>
   #include <stdio.h>

   void main()
   {
      HANDLE hProcess, hAccessToken;
      UCHAR InfoBuffer[1000];
      PTOKEN_PRIVILEGES ptgPrivileges = (PTOKEN_PRIVILEGES)InfoBuffer;
      DWORD dwInfoBufferSize;
      DWORD dwPrivilegeNameSize;
      DWORD dwDisplayNameSize;
      UCHAR ucPrivilegeName[500];
      UCHAR ucDisplayName[500];
      DWORD dwLangId;
      UINT x;

      hProcess = GetCurrentProcess();

      OpenProcessToken( hProcess, TOKEN_READ, &hAccessToken );

      GetTokenInformation( hAccessToken, TokenPrivileges, InfoBuffer,
         sizeof(InfoBuffer), &dwInfoBufferSize);

      printf( "Account privileges: \n\n" );
      for( x=0; x<ptgPrivileges->PrivilegeCount; x++ )
      {
         dwPrivilegeNameSize = sizeof( ucPrivilegeName );
         dwDisplayNameSize = sizeof( ucDisplayName );
         LookupPrivilegeName( NULL, &ptgPrivileges->Privileges[x].Luid,
            ucPrivilegeName, &dwPrivilegeNameSize );
         LookupPrivilegeDisplayName( NULL, ucPrivilegeName,
            ucDisplayName, &dwDisplayNameSize, &dwLangId );
         printf( "%40s (%s)\n", ucDisplayName, ucPrivilegeName );
      }
   }