GetAccountType should use CheckTokenMembership on XP (win2k?) and higher instead of EqualSID to check group membership to handle restricted tokens correctly
Or maybe it should have one function to check membership and one to check "actual" membership for the current process
-Anders
Logged In: YES
user_id=584402
Originator: NO
http://blogs.msdn.com/larryosterman/archive/2007/03/14/why-does-kb-118626-use-accesscheck-to-check-if-you-re-a-member-of-the-administrators-group.aspx
Logged In: YES
user_id=584402
Originator: NO
Fixed by your patch #1687456.