Token Universe v0.5

New features:

• Security viewer/editor for 30 types of objects
• Viewing maximum access for services, SCM database, LSA policy, SAM server, current window station, current desktop
• Opening clipboard tokens
• Opening pipe loopback tokens
• Allow re-parenting with seclogon process creation methods
• Process creation via a BITS trigger

Improvements:

• AppContainer and package family SID suggestions & recognition
• Update AppContainer list dialog
• Add console inheritance support with NtCreateUserProcess
• Allow direct COM object creation fallback
• Re-implement WdcRunTaskAsInteractiveUser

TokenUniverse v0.3

Changes

• Add dialog for checking access to various objects
  • Supported types: processes, threads, tokens, files, named pipes, registry keys, namespace symlinks, namespace directories, jobs, sections, semaphores, mutexes, timers, events, keyed events, registry transactions, sessions, I/O completion ports, partitions, debug objects, LSA accounts, SAM domains, SAM users, SAM groups, SAM aliases.
• Switch to LsaLogonUser + add support for virtual and no-elevation logon
• Use the credentials prompt on the secure desktop
• Add support for creating protected processes
• Suggest granting desktop/window station access during process creation
• Allow new processes to inherit the console
• Add more sources for SID suggestions
• Fix LSA account rights modification
• Fix using inherited handles

TokenUniverse v0.2

Changes

• Added viewer for default DACL
• Added SID suggestions to group selection dialog
• Added more process creation flags (child process policy, force job breakaway, ignore elevation, LPAC)
• Added support for registering created processes with CSR/SxS
• Improved integrity level selection dialog
• Improved token creation dialog UI
• Improved main window UI
• Added SID abbreviation cheat sheet
• Added more token information columns
• Added support for showing stack traces
• Fixed some high-DPI issues

TokenUniverse 0.1

The program still requires lots of improvements, both functionality- and design-wise. Nonetheless, having an alpha release available is better than nothing.

Note: use the x64 version when running on 64-bit machines.