Here are some sample outputs using dumptoken.cpp It seems to kill the program in some circumstances, so I will replace it with a C version that uses NtQueryInformationToken directly in a few weeks.