Sets a low integrity level for an open kernel object.


HRESULT SetKernelHandleToLowIL (HANDLE hObject);


The hObject argument provides a handle to an open kernel object.

Return Value

The function returns zero for success, else an error code.


This function is a shorthand for calling SetKernelHandleIntegrityLevel with the particular SID that is represented by LW in the Security Descriptor Definition Language. It can fail either at creating the SID or at setting the integrity level. Note that S_FALSE means just that integrity levels are meaningless because the operating system is not Windows Vista or higher.


The SetKernelHandleToLowIL function is exported from IERTUTIL as ordinal 50 in version 7.0 and higher.