在C＋＋中禁止或允许权限

下列代码描述了如何在一个访问令牌中开启或关闭一项特权，样例调用　LookuPrivilegeValue　函数得到标示本地系统用户权限的识别标志LUID. 然后样例调用adjusttokenprivileges函数，至于是开启或关闭特权，这取决于benableprivilege参数。

BOOL SetPrivilege(
HANDLE hToken,          // access token handle
LPCTSTR lpszPrivilege,  // name of privilege to enable/disable
BOOL bEnablePrivilege   // to enable or disable privilege
)
{
    TOKEN_PRIVILEGES tp;
    LUID luid;
    if ( !LookupPrivilegeValue(
NULL,            // lookup privilege on local system
lpszPrivilege,   // privilege to lookup
&luid ) )        // receives LUID of privilege
    {
      printf("LookupPrivilegeValue error: %u\n", GetLastError() );
      return FALSE;
    }
    tp.PrivilegeCount = 1;
    tp.Privileges[0].Luid = luid;
    if (bEnablePrivilege)
     tp.Privileges[0].Attributes = SE_PRIVILEGE_ENABLED;
    else
      tp.Privileges[0].Attributes = 0;
    // Enable the privilege or disable all privileges.
    if ( !AdjustTokenPrivileges(
hToken,
FALSE,
&tp,
sizeof(TOKEN_PRIVILEGES),
(PTOKEN_PRIVILEGES) NULL,
(PDWORD) NULL) )
    {
        printf("AdjustTokenPrivileges error: %u\n", GetLastError() );
       return FALSE;
    }
    if (GetLastError() == ERROR_NOT_ALL_ASSIGNED)
    {
      printf("The token does not have the specified privilege. \n");
     return FALSE;
    }
    return TRUE;
}