[cvsnt-dev] Re: NtCreateToken & SeImpersonatePrivilege

[KJK::Hyperion]

Tony Hoyle wrote:

>> What were exactly the problems in using NtCreateToken on Windows XP
>> and later? and doesn't Windows 2000 support SeImpersonatePrivilege
>> since Service Pack 4?
> Win2003 does not just any process to call NtCreateToken - they
> must be one of a few highly privileged processes, not just
> 'System'

have you discovered what exactly makes those processes special? i.e. 
what are the criteria used by NtCreateToken?

> SeImpersonatePrivilege does not exist in Win2k/XP

hmmm:

D:\Documents and Settings\Administrator>privcheck | findstr /I impersonate
SeImpersonatePrivilege *

This on a Windows 2000 Service Pack 4