Token中的信息

Token中有哪些信息呢?这我们可以从一个api中得到,

GetTokenInformation                       https://msdn.microsoft.com/en-us/library/windows/desktop/aa446671(v=vs.85).aspx

想要获取的信息类别

TOKEN_INFORMATION_CLASS

typedef enum _TOKEN_INFORMATION_CLASS { TokenUser                             = 1, TokenGroups, TokenPrivileges, TokenOwner, TokenPrimaryGroup, TokenDefaultDacl, TokenSource, TokenType, TokenImpersonationLevel, TokenStatistics, TokenRestrictedSids, TokenSessionId, TokenGroupsAndPrivileges, TokenSessionReference, TokenSandBoxInert, TokenAuditPolicy, TokenOrigin, TokenElevationType, TokenLinkedToken, TokenElevation, TokenHasRestrictions, TokenAccessInformation, TokenVirtualizationAllowed, TokenVirtualizationEnabled, TokenIntegrityLevel, TokenUIAccess, TokenMandatoryPolicy, TokenLogonSid, TokenIsAppContainer, TokenCapabilities, TokenAppContainerSid, TokenAppContainerNumber, TokenUserClaimAttributes, TokenDeviceClaimAttributes, TokenRestrictedUserClaimAttributes, TokenRestrictedDeviceClaimAttributes, TokenDeviceGroups, TokenRestrictedDeviceGroups, TokenSecurityAttributes, TokenIsRestricted, MaxTokenInfoClass } TOKEN_INFORMATION_CLASS, *PTOKEN_INFORMATION_CLASS;

如此在这里我们一一获取下这些信息

1.TOKEN_USER: https://msdn.microsoft.com/en-us/library/windows/desktop/aa379634(v=vs.85).aspx

2.TOKEN_GROUPS: https://msdn.microsoft.com/en-us/library/windows/desktop/aa379624(v=vs.85).aspx

以及各种Attributes的意义 Value Meaning SE_GROUP_ENABLED 0x00000004L The SID is enabled for access checks. When the system performs an access check, it checks for access-allowed and access-denied access control entries (ACEs) that apply to the SID. A SID without this attribute is ignored during an access check unless the SE_GROUP_USE_FOR_DENY_ONLY attribute is set. SE_GROUP_ENABLED_BY_DEFAULT 0x00000002L The SID is enabled by default. SE_GROUP_INTEGRITY 0x00000020L The SID is a mandatory integrity SID. SE_GROUP_INTEGRITY_ENABLED 0x00000040L The SID is enabled for mandatory integrity checks. SE_GROUP_LOGON_ID 0xC0000000L The SID is a logon SID that identifies the logon session associated with an access token. SE_GROUP_MANDATORY 0x00000001L The SID cannot have the SE_GROUP_ENABLED attribute cleared by a call to the