SepRemoveAceFromTokenDefaultDacl

VOID __stdcall SepRemoveAceFromTokenDefaultDacl(_TOKEN *Token, VOID *InputSid){
  _ACL *DefaultDacl; 
  UINT64 pIndex; 

  LODWORD(pIndex) = 0;
  DefaultDacl = Token->DefaultDacl;
  if( DefaultDacl )
  {
    if( RtlFindAceBySid(Token->DefaultDacl, InputSid, &pIndex) )
      RtlDeleteAce(DefaultDacl, (unsigned int)pIndex);
  }
}

Referenced by:

NtSetInformationToken