PnpGetCallerSessionId

__int64 __fastcall PnpGetCallerSessionId(UINT64 *SessionId){
  void *PrimaryToken; 
  unsigned int SessionIdToken; 
  _SECURITY_SUBJECT_CONTEXT SubjectContext; 

  memset(&SubjectContext, 0, sizeof(SubjectContext));
  SeCaptureSubjectContext((INT64)&SubjectContext);
  PrimaryToken = SubjectContext.PrimaryToken;
  if( SubjectContext.ClientToken )
    PrimaryToken = SubjectContext.ClientToken;
  SessionIdToken = SeQuerySessionIdToken(PrimaryToken, SessionId);
  SeReleaseSubjectContext(&SubjectContext);
  return SessionIdToken;
}

Referenced by:

PiCMQueryRemove