_WIN32_WINNT >= 0x0500. (DISABLE_MAX_PRIVILEGE, SANDBOX_INERT, LUA_TOKEN, WRITE_RESTRICTED): Define. (IsTokenRestricted): Declare for >= Win 2000.