[cvsnt-dev] Re: NtCreateToken & SeImpersonatePrivilege

KJK::Hyperion noog at libero.it
Fri May 21 22:12:24 BST 2004

Community technical support mailing list was retired 2010 and replaced with a professional technical support team. For assistance please contact: Pre-sales Technical support via email to sales@march-hare.com.

Tony Hoyle wrote:

>> What were exactly the problems in using NtCreateToken on Windows XP
>> and later? and doesn't Windows 2000 support SeImpersonatePrivilege
>> since Service Pack 4?
> Win2003 does not just any process to call NtCreateToken - they
> must be one of a few highly privileged processes, not just
> 'System'

have you discovered what exactly makes those processes special? i.e. 
what are the criteria used by NtCreateToken?

> SeImpersonatePrivilege does not exist in Win2k/XP


D:\Documents and Settings\Administrator>privcheck | findstr /I impersonate
SeImpersonatePrivilege *

This on a Windows 2000 Service Pack 4

More information about the cvsnt-dev mailing list