VOID __stdcall SepRemoveAceFromTokenDefaultDacl(_TOKEN *Token, VOID *InputSid){
_ACL *DefaultDacl;
UINT64 pIndex;
LODWORD(pIndex) = 0;
DefaultDacl = Token->DefaultDacl;
if( DefaultDacl )
{
if( RtlFindAceBySid(Token->DefaultDacl, InputSid, &pIndex) )
RtlDeleteAce(DefaultDacl, (unsigned int)pIndex);
}
}