The priv token contains use of privilege information. The fields are:
A token ID
A success/failure field indicating whether the use of privilege was successful (1 success, 0 failure)
The privilege being tested
The following figure shows a priv token.
A priv token is displayed by praudit as follows:
useofpriv,failed use of priv,win_mac_write