Search code examples
windowswinapint

Win32: When SeCreateTokenPrivilege required?

Docs say SeCreateTokenPrivilege is used

when the process uses NtCreateToken() or other token-creation APIs.

What is the other token-creation APIs (that may require SeCreateTokenPrivilege)?

Solution

  • According to RbMm's reply:

    NtCreateTokenEx and NtCreateLowBoxToken (not require SeCreateTokenPrivilege), set TokenLinkedToken require