Find out if account sid has administrator privileges

[John Dumais]

Hello,

I'm trying to figure out if I can find out if an account has administrator
privileges given just a sid I got from LookupAccountName. Normally, I would
just call LogonUser & grope through the returned token looking for group
sids that match the administrator alias, but my IT guys got all wrapped
around the axle when they saw I wanted to call LogonUser.

Thanks.
John Dumais
(e-mail address removed)

 

[Drew Cooper [MSFT]]

CheckTokenMembership. The Platform SDK entry for the API has sample code to
check for membership in the local administrators group.

 

[John Dumais]

I found three articles that, taken together, do what I need...

http://www.msdn.microsoft.com/msdnmag/issues/01/04/security/default.aspx
http://support.microsoft.com/default.aspx?scid=kb;en-us;180548
http://support.microsoft.com/default.aspx?scid=kb;en-us;118626

Thanks,