MSDN states that DuplicateToken should create a new token with the

TOKEN_QUERY | TOKEN_IMPERSONATE rights, not 0.

MSDN states that DuplicateToken should create a new token with the
94951803 · Robert Shearman · Alexandre Julliard · ebb1aaee · 94951803
Commit 94951803 authored Jun 15, 2005 by Robert Shearman Committed by Alexandre Julliard Jun 15, 2005
Hide whitespace changes
Inline Side-by-side

Showing with 3 additions and 2 deletions

security.c dlls/advapi32/security.c +3 -2

No files found.
--- a/dlls/advapi32/security.c
+++ b/dlls/advapi32/security.c
@@ -3129,8 +3129,9 @@ BOOL WINAPI DuplicateToken(
        SECURITY_IMPERSONATION_LEVEL ImpersonationLevel,
        PHANDLE DuplicateTokenHandle )
 {
-    return DuplicateTokenEx( ExistingTokenHandle, 0, NULL, ImpersonationLevel,
-                             TokenImpersonation, DuplicateTokenHandle );
+    return DuplicateTokenEx( ExistingTokenHandle, TOKEN_IMPERSONATE | TOKEN_QUERY,
+                             NULL, ImpersonationLevel, TokenImpersonation,
+                             DuplicateTokenHandle );
 }

 BOOL WINAPI EnumDependentServicesA(