// ntifs.h
typedef struct _TOKEN_STATISTICS {
LUID TokenId;
LUID AuthenticationId;
LARGE_INTEGER ExpirationTime;
TOKEN_TYPE TokenType;
SECURITY_IMPERSONATION_LEVEL ImpersonationLevel;
ULONG DynamicCharged;
ULONG DynamicAvailable;
ULONG GroupCount;
ULONG PrivilegeCount;
LUID ModifiedId;
} TOKEN_STATISTICS, *PTOKEN_STATISTICS;
View the official Windows Driver Kit DDI referenceNo description available.
The TOKEN_STATISTICS structure contains information about an access token. A driver can retrieve this information by calling SeQueryInformationToken or ZwQueryInformationToken.
TokenIdSpecifies a locally unique identifier (LUID) that identifies this instance of the token object.
AuthenticationIdSpecifies an LUID assigned to the session this token represents. There can be many tokens representing a single logon session.
ExpirationTimeSpecifies the time at which this token expires. Expiration times for access tokens are not currently supported.
TokenTypeSpecifies a TOKEN_TYPE enumerated type indicating whether the token is a primary or impersonation token.
ImpersonationLevelSpecifies a SECURITY_IMPERSONATION_LEVEL enumerated type indicating the impersonation level of the token. This member is valid only if the TokenType is TokenImpersonation.
DynamicChargedSpecifies the amount, in bytes, of memory allocated for storing a default access-control list (DACL) and primary group identifier.
DynamicAvailableSpecifies the portion of the memory allocated for storing a DACL and primary group identifier that is not already in use. This value is returned as a count of free bytes.
GroupCountSpecifies the number of supplemental group security identifiers (SID) included in the token.
PrivilegeCountSpecifies the number of privileges included in the token.
ModifiedIdSpecifies an LUID that changes each time the token is modified. An application can use this value as a test of whether a security context has changed since it was last used.