| Min version | XP | 2003/XP64 SP1 | 2003/XP64 SP1 | |
|---|---|---|---|---|
| Max version | 2003/XP64 SP2 | 10 TH2 | 10 TH2 | |
| Architecture | x86 | x64 | x86 | |
| x86 offset offset:bitpos | Field Name | x64 offset offset:bitpos | ||
| 0x0000 | struct _LUID OperationID | 0x0000 | ||
| 0x0008 | uint8_t SecurityEvaluated | 0x0008 | ||
| 0x0009 | uint8_t GenerateAudit | 0x0009 | ||
| 0x000A | uint8_t GenerateOnClose | 0x000A | ||
| 0x000B | uint8_t PrivilegesAllocated | 0x000B | ||
| 0x000C | unsigned long Flags | 0x000C | ||
| 0x0010 | unsigned long RemainingDesiredAccess | 0x0010 | ||
| 0x0014 | unsigned long PreviouslyGrantedAccess | 0x0014 | ||
| 0x0018 | unsigned long OriginalDesiredAccess | 0x0018 | ||
| 0x001C | struct _SECURITY_SUBJECT_CONTEXT SubjectSecurityContext | 0x0020 | ||
| 0x002C | void * SecurityDescriptor | 0x0040 | ||
| 0x0030 | void * AuxData | 0x0048 | ||
| 0x0034 | union __unnamed Privileges | union <unnamed-tag> Privileges | 0x0050 | |
| 0x0060 | uint8_t AuditPrivileges | 0x007C | ||
| 0x0064 | struct _UNICODE_STRING ObjectName | 0x0080 | ||
| 0x006C | struct _UNICODE_STRING ObjectTypeName | 0x0090 | ||