FIND_BY_SID_DATA - NtDoc

Native API online documentation, based on the System Informer (formerly Process Hacker) phnt headers 
// ntifs.h

typedef struct {
  ULONG Restart;
  SID   Sid;
} FIND_BY_SID_DATA, *PFIND_BY_SID_DATA;
View the official Windows Driver Kit DDI reference
// winioctl.h

typedef struct {
  DWORD Restart;
  SID   Sid;
} FIND_BY_SID_DATA, *PFIND_BY_SID_DATA;
View the official Win32 API reference

NtDoc

No description available.

Edit description on GitHub

Windows Driver Kit DDI reference (ns-ntifs-find_by_sid_data)

Description

The FIND_BY_SID_DATA structure contains data for the FSCTL_FIND_FILES_BY_SID control code.

Members

Restart

Indicates whether to restart the search. This member should be 1 on first call, so the search will start from the root. For subsequent calls, this member should be zero so the search will resume at the point where it stopped.

Sid

A SID structure that specifies the desired creator owner.

Remarks

To perform this operation, call FltFsControlFile or ZwFsControlFile.

See FSCTL_FIND_FILES_BY_SID IOCTL (winioctl.h).

See also

FSCTL_FIND_FILES_BY_SID

View the official Windows Driver Kit DDI reference

Edit description on GitHub

Win32 API reference (ns-winioctl-find_by_sid_data)

FIND_BY_SID_DATA structure

Description

Contains data for the FSCTL_FIND_FILES_BY_SID control code.

Members

Restart

Indicates whether to restart the search. This member should be 1 on first call, so the search will start from the root. For subsequent calls, this member should be zero so the search will resume at the point where it stopped.

Sid

A SID structure that specifies the desired creator owner.

See also

FSCTL_FIND_FILES_BY_SID

View the official Win32 API reference

Edit description on GitHub