About
viewtoken is a command line tool for viewing the access token associated with a process. It will output information about the security identifier (SID) for the User, Owner and Groups associated with the token.
You may specify either a process id or a window name to view the token from. If you specify a window name the process that created that window will be used. To be able to view the tokens from a process you must have access to it. To see a list of processes you have access to and their associated process id's you can use the -l switch to list all the current processes.
Example Usage
viewtoken.exe
This will view the access token for the currently logged on user by using the process occurence of viewtoken.exe. Its a quick "who am i".
viewtoken.exe -l
This will list the current processes on the system including their process id's and if you have the correct access needed in order to view the access token from them.
viewtoken.exe -p 404 -v
This will view the access token for the process of ID 404 with verbose output.
viewtoken.exe -v -w "Utility Manager"
This will view the access token with verbose output for the process which created the window with the title of "Utility Manager".
Screenshots
