// ntifs.h
BOOLEAN SeTokenIsNoChildProcessRestrictionEnforced(
[in] PACCESS_TOKEN Token,
[out, optional] PBOOLEAN UnlessSecure
);
View the official Windows Driver Kit DDI referenceNo description available.
The SeTokenIsNoChildProcessRestrictionEnforced routine determines if the token carries the no child process restriction.
Token [in]Specifies a pointer to the access token.
UnlessSecure [out, optional]Optionally provides a pointer to the value that will be set to TRUE when secure process creation is enabled even if process creation is restricted.
This routine returns TRUE if Token carries the no child process restriction.