SID（安全标识符）

creating a SID for the Everyone group.

 DWORD SidSize;
 PSID TheSID;
 LPTSTR p;

 SidSize = SECURITY_MAX_SID_SIZE;
 // Allocate enough memory for the largest possible SID.
 if(!(TheSID = LocalAlloc(LMEM_FIXED, SidSize)))
 {
     fprintf(stderr, "Could not allocate memory.\n");
     exit();
 }
 // Create a SID for the Everyone group on the local computer.
 if(!CreateWellKnownSid(WinWorldSid, NULL, TheSID, &SidSize))
 {
     fprintf(stderr,
             "CreateWellKnownSid Error %u",
             GetLastError());
 }
 else
 {
     // Get the string version of the SID (S-1-1-0).
     if(!(ConvertSidToStringSid(TheSID, &p)))
     {
         fprintf(stderr,
                 "Error during ConvertSidToStringSid.\n");
         exit();
     }

     // Use the string SID as needed.
     // ...

     // When done, free the memory used.
     LocalFree(p);
     LocalFree(TheSID);
 }

 typedef enum {

     WinNullSid                                  = ,
     WinWorldSid                                 = ,
     WinLocalSid                                 = ,
     WinCreatorOwnerSid                          = ,
     WinCreatorGroupSid                          = ,
     WinCreatorOwnerServerSid                    = ,
     WinCreatorGroupServerSid                    = ,
     WinNtAuthoritySid                           = ,
     WinDialupSid                                = ,
     WinNetworkSid                               = ,
     WinBatchSid                                 = ,
     WinInteractiveSid                           = ,
     WinServiceSid                               = ,
     WinAnonymousSid                             = ,
     WinProxySid                                 = ,
     WinEnterpriseControllersSid                 = ,
     WinSelfSid                                  = ,
     WinAuthenticatedUserSid                     = ,
     WinRestrictedCodeSid                        = ,
     WinTerminalServerSid                        = ,
     WinRemoteLogonIdSid                         = ,
     WinLogonIdsSid                              = ,
     WinLocalSystemSid                           = ,
     WinLocalServiceSid                          = ,
     WinNetworkServiceSid                        = ,
     WinBuiltinDomainSid                         = ,
     WinBuiltinAdministratorsSid                 = ,
     WinBuiltinUsersSid                          = ,
     WinBuiltinGuestsSid                         = ,
     WinBuiltinPowerUsersSid                     = ,
     WinBuiltinAccountOperatorsSid               = ,
     WinBuiltinSystemOperatorsSid                = ,
     WinBuiltinPrintOperatorsSid                 = ,
     WinBuiltinBackupOperatorsSid                = ,
     WinBuiltinReplicatorSid                     = ,
     WinBuiltinPreWindows2000CompatibleAccessSid = ,
     WinBuiltinRemoteDesktopUsersSid             = ,
     WinBuiltinNetworkConfigurationOperatorsSid  = ,
     WinAccountAdministratorSid                  = ,
     WinAccountGuestSid                          = ,
     WinAccountKrbtgtSid                         = ,
     WinAccountDomainAdminsSid                   = ,
     WinAccountDomainUsersSid                    = ,
     WinAccountDomainGuestsSid                   = ,
     WinAccountComputersSid                      = ,
     WinAccountControllersSid                    = ,
     WinAccountCertAdminsSid                     = ,
     WinAccountSchemaAdminsSid                   = ,
     WinAccountEnterpriseAdminsSid               = ,
     WinAccountPolicyAdminsSid                   = ,
     WinAccountRasAndIasServersSid               = ,
     WinNTLMAuthenticationSid                    = ,
     WinDigestAuthenticationSid                  = ,
     WinSChannelAuthenticationSid                = ,
     WinThisOrganizationSid                      = ,
     WinOtherOrganizationSid                     = ,
     WinBuiltinIncomingForestTrustBuildersSid    = ,
     WinBuiltinPerfMonitoringUsersSid            = ,
     WinBuiltinPerfLoggingUsersSid               = ,
     WinBuiltinAuthorizationAccessSid            = ,
     WinBuiltinTerminalServerLicenseServersSid   = ,
     WinBuiltinDCOMUsersSid                      = ,
     WinBuiltinIUsersSid                         = ,
     WinIUserSid                                 = ,
     WinBuiltinCryptoOperatorsSid                = ,
     WinUntrustedLabelSid                        = ,
     WinLowLabelSid                              = ,
     WinMediumLabelSid                           = ,
     WinHighLabelSid                             = ,
     WinSystemLabelSid                           = ,
     WinWriteRestrictedCodeSid                   = ,
     WinCreatorOwnerRightsSid                    = ,
     WinCacheablePrincipalsGroupSid              = ,
     WinNonCacheablePrincipalsGroupSid           = ,
     WinEnterpriseReadonlyControllersSid         = ,
     WinAccountReadonlyControllersSid            = ,
     WinBuiltinEventLogReadersGroup              = ,
     WinNewEnterpriseReadonlyControllersSid      = ,
     WinBuiltinCertSvcDComAccessGroup            = ,
     WinMediumPlusLabelSid                       = ,
     WinLocalLogonSid                            = ,
     WinConsoleLogonSid                            = ,
     WinThisOrganizationCertificateSid            = ,
 } WELL_KNOWN_SID_TYPE;

匹配一个SID与已知的SID是否匹配

 BOOL IsWellKnownSid(
   PSID pSid,
   WELL_KNOWN_SID_TYPE WellKnownSidType
 );