DuplicateToken function (securitybaseapi.h) - Win32 apps
By GrantMeStrength
Archived: 2026-04-06 00:26:58 UTC
The DuplicateToken function creates a new access token that duplicates one already in existence.
BOOL DuplicateToken(
 [in] HANDLE ExistingTokenHandle,
 [in] SECURITY_IMPERSONATION_LEVEL ImpersonationLevel,
 [out] PHANDLE DuplicateTokenHandle
);
[in] ExistingTokenHandle
A handle to an access token opened with TOKEN_DUPLICATE access.
[in] ImpersonationLevel
Specifies a SECURITY_IMPERSONATION_LEVEL enumerated type that supplies the impersonation level of
the new token.
[out] DuplicateTokenHandle
A pointer to a variable that receives a handle to the duplicate token. This handle has TOKEN_IMPERSONATE
and TOKEN_QUERY access to the new token.
When you have finished using the new token, call the CloseHandle function to close the token handle.
If the function succeeds, the return value is nonzero.
If the function fails, the return value is zero. To get extended error information, call GetLastError.
The DuplicateToken function creates an impersonation token, which you can use in functions such as
SetThreadToken and ImpersonateLoggedOnUser. The token created by DuplicateToken cannot be used in the
CreateProcessAsUser function, which requires a primary token. To create a token that you can pass to
CreateProcessAsUser, use the DuplicateTokenEx function.
Requirement Value
Minimum supported client Windows XP [desktop apps | UWP apps]
Minimum supported server Windows Server 2003 [desktop apps | UWP apps]
Target Platform Windows
https://learn.microsoft.com/en-us/windows/win32/api/securitybaseapi/nf-securitybaseapi-duplicatetoken
Page 1 of 2

Requirement Value
Header securitybaseapi.h (include Windows.h)
Library Advapi32.lib
DLL Advapi32.dll
Access Control Overview
Basic Access Control Functions
CreateProcessAsUser
DuplicateTokenEx
ImpersonateLoggedOnUser
SECURITY_IMPERSONATION_LEVEL
SetThreadToken
Source: https://learn.microsoft.com/en-us/windows/win32/api/securitybaseapi/nf-securitybaseapi-duplicatetoken
https://learn.microsoft.com/en-us/windows/win32/api/securitybaseapi/nf-securitybaseapi-duplicatetoken
Page 2 of 2