PnpGetCallerSessionId
__int64 __fastcall PnpGetCallerSessionId(UINT64 *SessionId){
void *PrimaryToken;
unsigned int SessionIdToken;
_SECURITY_SUBJECT_CONTEXT SubjectContext;
memset(&SubjectContext, 0, sizeof(SubjectContext));
SeCaptureSubjectContext((INT64)&SubjectContext);
PrimaryToken = SubjectContext.PrimaryToken;
if( SubjectContext.ClientToken )
PrimaryToken = SubjectContext.ClientToken;
SessionIdToken = SeQuerySessionIdToken(PrimaryToken, SessionId);
SeReleaseSubjectContext(&SubjectContext);
return SessionIdToken;
}Referenced by:
PiCMQueryRemove