TOKEN_ORIGIN - NtDoc
Native API online documentation, based on the System Informer
(formerly Process Hacker) phnt
headers
// ntifs.h
typedef struct _TOKEN_ORIGIN {
LUID OriginatingLogonSession;
} TOKEN_ORIGIN, *PTOKEN_ORIGIN;
View the official Windows Driver Kit DDI referenceNo description available.
The TOKEN_ORIGIN structure contains information about the origin of the logon session.
OriginatingLogonSessionThe locally unique identifier (LUID) for the logon session. If the token resulted from a logon using explicit credentials, such as passing name, domain, and password to the user-mode LogonUser function, then this member will contain the ID of the logon session that created it. If the token resulted from network authentication, such as a call to the user-mode AcceptSecurityContext, or a call to the user-mode LogonUser function with dwLogonType set to LOGON32_LOGON_NETWORK or LOGON32_LOGON_NETWORK_CLEARTEXT, then this member will be zero.