NtCurrentProcessToken - NtDoc

Native API online documentation, based on the System Informer (formerly Process Hacker) phnt headers 
#ifndef _NTPSAPI_H
//
// Processes
//
#if (PHNT_MODE != PHNT_MODE_KERNEL)

// Windows 8 and above
#define NtCurrentProcessToken() ((HANDLE)(LONG_PTR)-4) // NtOpenProcessToken(NtCurrentProcess())

#endif
#endif

View code on GitHub

This macro defines a pseudo-handle that allows querying information about the primary token of the calling process without explicitly opening it.

Applicable to

Remarks

Note that as opposed to NtCurrentProcess and NtCurrentThread, the system does not accept token pseudo-handles outside of the token-querying function.

Required OS version

This macro was introduced in Windows 8.

See also

Edit description on GitHub