| Min version | XP | 2003/XP64 SP1 |
|---|---|---|
| Max version | 2003/XP64 SP2 | 10 TH2 |
| x86 offset offset:bitpos | Field Name | |
| 0x0000 | struct _LUID OperationID | |
| 0x0008 | uint8_t SecurityEvaluated | |
| 0x0009 | uint8_t GenerateAudit | |
| 0x000A | uint8_t GenerateOnClose | |
| 0x000B | uint8_t PrivilegesAllocated | |
| 0x000C | unsigned long Flags | |
| 0x0010 | unsigned long RemainingDesiredAccess | |
| 0x0014 | unsigned long PreviouslyGrantedAccess | |
| 0x0018 | unsigned long OriginalDesiredAccess | |
| 0x001C | struct _SECURITY_SUBJECT_CONTEXT SubjectSecurityContext | |
| 0x002C | void * SecurityDescriptor | |
| 0x0030 | void * AuxData | |
| 0x0034 | union __unnamed Privileges | union <unnamed-tag> Privileges |
| 0x0060 | uint8_t AuditPrivileges | |
| 0x0064 | struct _UNICODE_STRING ObjectName | |
| 0x006C | struct _UNICODE_STRING ObjectTypeName | |