LookupAccountSid returns NT Pseudo Domain
I am trying to get the user name for a process that is already running (not the current process). I got the process handle and used it to get a token handle, which I use in the Win32 call GetTokenInformation. All this seems to work fine. However, when I try to read the Username of the process using the Win32 call LookupAccountSid, I get NT Pseudo Domain and the SID Type is 3 (which usually is domain) not 1 (which is user). Does anyone have an idea of what might have gone wrong?
Thanks,
Yehuda
|