RtlAdjustPrivilege - NtDoc
Native API online documentation, based on the System Informer
(formerly Process Hacker) phnt
headers
#ifndef _NTRTL_H
/**
* The RtlAdjustPrivilege routine enables or disables a privilege in the token of the current thread or process.
*
* \param Privilege The identifier of the privilege to adjust.
* \param Enable If `TRUE`, the privilege is enabled; if `FALSE`, it is disabled.
* \param Client If `TRUE`, the privilege is adjusted in the current thread's impersonation token; otherwise in the process token.
* \param WasEnabled A pointer to a variable that receives the previous enabled state of the privilege.
* \return NTSTATUS Successful or errant status.
*/
NTSYSAPI
NTSTATUS
NTAPI
RtlAdjustPrivilege(
_In_ ULONG Privilege,
_In_ BOOLEAN Enable,
_In_ BOOLEAN Client,
_Out_ PBOOLEAN WasEnabled
);
View code on GitHubEnables or disables a single privilege in the current process or thread token.
Privilege - the LUID of the privilege to adjust.Enable - a boolean indicating whether to enable or disable the privilege.Client - a boolean indicating whether to perform the operation on the current process (FALSE) or thread (TRUE) token.WasEnabled - a pointer to a to a variable that receives the previous state of the privilege.STATUS_PRIVILEGE_NOT_HELD - the privilege is not present in the token.STATUS_NO_TOKEN - the caller requested to adjust a thread token, but the thread is not impersonating at the moment.Disabled privileges are not taken into account during access checks. Some privileges cannot be enabled when token integrity level is too low.
This function is a wrapper over NtAdjustPrivilegesToken.