I can get the privileges of a user account through the API LsaEnumerateAccountsWithUserRight. But this function ignores the privileges inherited as part of a group membership. msdn documentation clearly mentions this
The accounts returned by this function hold the specified privilege directly through the user account, not as part of membership to a group.
Is it possible to get this done in windows? Any guidance is appreciated.