🚀 go-pugleaf

Sorry for horrible look.

Hope this is a suitable newsgroup for this question (previously asked in 
students ng).


Instead of asking users for username/password when starting an application.
I would like to integrate security aspect closer to WinXP.

 What I thought is creating a security group.
Something close to LookupAccountSid when peUse has the value SidTypeGroup.
Is it feasible and how ?
How can I make an existing user SID becoming a member of this newly created 
group ?


Just to clarify my point.

 When we want to know to which security groups belong a user we do 
something
like (see code below). From there all group memberships are known.

 Therefore it would be nice if we could create a security group
with actual usage entirely dedicated to a specific application.

 Users would avoid to identify themselves over and
over again since they already did that at boot up time.


Thnks in advance for any suggestions.


-------------------------------------------------------------------------

   hProcess = GetCurrentProcess();
   if ( !hProcess ) {
      PERR( TEXT("GetCurrentProcess") );
      return 1;
   }

   if ( !OpenProcessToken(hProcess, (TOKEN_READ |
                                     TOKEN_QUERY_SOURCE),
                                    &hAccessToken) ) {
      PERR( TEXT("OpenProcessToken") );
      return 1;
   }
 ticInfoClass = TokenGroups;
   dwTokInfoBufSz = SZ_TOK_INFO_BUF;
 if ( !GetTokenInformation(hAccessToken,
                             ticInfoClass,
                             ucTokInfoBuf,
                             (DWORD) SZ_TOK_INFO_BUF,
                             &dwTokInfoBufSz) ) {
      PERR( TEXT("GetTokenInformation") );
      return 1;
   }

-------------------------------------------------------------------------