Getting user SID in NT, Win2k

I have a filter driver and I need to get the user SID for Create IRPs.  From reading previous posts on this subject, it seemed the comprehensive answer was to use the Zw* APIs.  And it works great under WXP.  However these APIs aren’t available in Win2K or NT: I get compiler errors in W2K build environment, and the IFS kit documentation says these routines are only available in WXP and later.  Okay fine, so I thought I could use the Se* APIs to get the SID.  But SeQuerySubjectContextToken(), according to the documentation, is only available in W2K and later.  So how do you get the SID in NT?  Is it possible?  I’m using the S03 IFS kit.  Thanks for any help.

 

-Mike

ObOpenObjectByPointer + ZwQueryInformationToken

Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
xxxxx@storagecraft.com
http://www.storagecraft.com
----- Original Message -----
From: Mike Wick
To: Windows File Systems Devs Interest List
Sent: Wednesday, June 22, 2005 11:06 PM
Subject: [ntfsd] Getting user SID in NT, Win2k

I have a filter driver and I need to get the user SID for Create IRPs. From reading previous posts on this subject, it seemed the comprehensive answer was to use the Zw* APIs. And it works great under WXP. However these APIs aren’t available in Win2K or NT: I get compiler errors in W2K build environment, and the IFS kit documentation says these routines are only available in WXP and later. Okay fine, so I thought I could use the Se* APIs to get the SID. But SeQuerySubjectContextToken(), according to the documentation, is only available in W2K and later. So how do you get the SID in NT? Is it possible? I’m using the S03 IFS kit. Thanks for any help.

-Mike


Questions? First check the IFS FAQ at https://www.osronline.com/article.cfm?id=17

You are currently subscribed to ntfsd as: xxxxx@storagecraft.com
To unsubscribe send a blank email to xxxxx@lists.osr.com