I've tried to get SID in my server when some other client delete the shared
files in my server.In my file system filter driver,IRP_MJ_SET_INFORMATION
dispatch,when the FileInformationClass==FileDispositionInformation, I got NO
token of current thread,but got a token of current process.it is S-1-5-18.why
I can not get the correct SID of the impersonation user??

Regards,
Ming