#ifndef _NTSEAPI_H
//
// Authz
//
// begin_rev
#if (PHNT_MODE == PHNT_MODE_KERNEL)

//
// Token information structures
//

/**
 * The TOKEN_USER structure identifies the user associated with an access token.
 * \sa https://learn.microsoft.com/en-us/windows/win32/api/winnt/ns-winnt-token_user
 */
typedef struct _TOKEN_USER
{
    SID_AND_ATTRIBUTES User;
} TOKEN_USER, *PTOKEN_USER;

#endif
// end_rev
#endif
View code on GitHub

// ntifs.h

typedef struct _TOKEN_USER {
  SID_AND_ATTRIBUTES User;
} TOKEN_USER, *PTOKEN_USER;
View the official Windows Driver Kit DDI reference

NtDoc

No description available.

Edit description on GitHub

Windows Driver Kit DDI reference (ns-ntifs-_token_user)

TOKEN_USER structure

Description

The TOKEN_USER structure identifies the user associated with an access token.

Members

`User`

Specifies an SID_AND_ATTRIBUTES structure representing the user associated with the access token.

Remarks

Unlike TOKEN_GROUPS structures, TOKEN_USER structures cannot be passed to SeFilterToken. Nevertheless, it is possible to designate a user SID as a deny-only SID by specifying the user SID as one of the group SIDs in the TOKEN_GROUPS structure passed to SeFilterToken.

TOKEN_USER - NtDoc