On Wed, Apr 1, 2015 at 7:02 PM, Corinna Vinschen <[email protected]> wrote: > No, wait. SECURITY_BUILTIN_DOMAIN_RID (32) is the RID for the "BUILTIN" > domain which contains well known groups like > > Administrators ==> SID S-1-5-32-544 > Users ==> SID S-1-5-32-545 > etc. > > SID S-1-5-5-... are logon SIDs. They are generated on the fly to > identify your session and added to your user token's group list. The > macro connected to them are SECURITY_LOGON_IDS_RID and > SECURITY_LOGON_IDS_RID_COUNT.
Thanks again! You are right. I was confused by 0x00000020, I thought it is a constant, further testing indicate it is just garbage value. -- Regards, Qian Hong - http://www.winehq.org -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
