#ifndef _NTRTL_H
#if (PHNT_VERSION >= PHNT_WIN8)

// rev
NTSYSAPI
BOOLEAN
NTAPI
RtlIsPackageSid(
    _In_ PSID Sid
    );

#endif
#endif
View code on GitHub

Determines if the specified SID is an AppContainer package SID.

Parameters

Sid - a SID to check.

Implementation details

The function checks if the SID belongs to SECURITY_APP_PACKAGE_AUTHORITY (15) with SECURITY_APP_PACKAGE_BASE_RID (2). In other words, it accepts S-1-15-2-* SIDs.

Required OS version

This function was introduced in Windows 8.

RtlIsPackageSid - NtDoc

Parameters

Implementation details

Required OS version

See also