<?xml version="1.0" encoding="UTF-8" standalone="yes"?>

<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
 <assemblyIdentity
    type="win32"
    name="DelphiApplication"
    version="1.0.0.0"
    processorArchitecture="*"/>
 <dependency>
    <dependentAssembly>
      <assemblyIdentity
         type="win32"
         name="Microsoft.Windows.Common-Controls"
         version="6.0.0.0"
         publicKeyToken="6595b64144ccf1df"
         language="*"
         processorArchitecture="*"/>
    </dependentAssembly>
 </dependency>
 <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
    <security>
      <requestedPrivileges>
         <requestedExecutionLevel
           level="requireAdministrator"
           uiAccess="false"/>
      </requestedPrivileges>
    </security>
 </trustInfo>
</assembly>

type
 TPrivilegeCheckState = (csError, csLimitedUser, csAdmin);

function IsAdmin: TPrivilegeCheckState;
const
 SECURITY_NT_AUTHORITY: TSIDIdentifierAuthority =
   (Value: (0, 0, 0, 0, 0, 5));
 SECURITY_BUILTIN_DOMAIN_RID = $00000020;
 DOMAIN_ALIAS_RID_ADMINS = $00000220;
 SECURITY_MANDATORY_HIGH_RID = $00003000;
 TokenIntegrityLevel = 25;
var
 hAccessToken: THandle;
 ptgGroups: PTokenGroups;
 dwInfoBufferSize: DWORD;
 psidAdministrators: PSID;
 I: Integer;
 SubAuthority: DWORD;    
begin
 Result := csError;
 if Win32Platform <> VER_PLATFORM_WIN32_NT then Exit;
 if not OpenThreadToken(GetCurrentThread,
   TOKEN_QUERY, True, hAccessToken) then
   if not OpenProcessToken(GetCurrentProcess,
     TOKEN_QUERY, hAccessToken) then Exit;
 try
   GetMem(ptgGroups, 1024);
   try
     if Win32MajorVersion < 6 then
     begin
       if not GetTokenInformation(hAccessToken, TokenGroups,
         ptgGroups, 1024, dwInfoBufferSize) then Exit;
       AllocateAndInitializeSid(SECURITY_NT_AUTHORITY, 2,
         SECURITY_BUILTIN_DOMAIN_RID, DOMAIN_ALIAS_RID_ADMINS,
         0, 0, 0, 0, 0, 0, psidAdministrators);
       try
         Result := csLimitedUser;
         for I := 0 to ptgGroups.GroupCount - 1 do
           if EqualSid(psidAdministrators, ptgGroups.Groups[I].Sid) then
           begin
             Result := csAdmin;
             Break;
           end;
       finally
         FreeSid(psidAdministrators);
       end;
     end
     else
     begin
       if GetTokenInformation(hAccessToken, TTokenInformationClass(TokenIntegrityLevel),
         ptgGroups, 1024, dwInfoBufferSize) and
         IsValidSid(PSIDAndAttributes(ptgGroups)^.Sid) then
       begin
         Result := csLimitedUser;
         SubAuthority :=
           GetSidSubAuthorityCount(PSIDAndAttributes(ptgGroups)^.Sid)^ - 1;
         if GetSidSubAuthority(PSIDAndAttributes(ptgGroups)^.Sid,
           SubAuthority)^ >= SECURITY_MANDATORY_HIGH_RID then
           Result := csAdmin;
       end;
     end;
   finally
     FreeMem(ptgGroups);
   end;
 finally
   CloseHandle(hAccessToken);
 end;
end;

// CheckTokenMembership.
function IsAdmin3: Boolean;
const
 SE_GROUP_ENABLED = $00000004;
 SE_GROUP_USE_FOR_DENY_ONLY  = $00000010;
var
 psidAdministrators: PSID;
 bIsMember: LongBool;
begin
 Result := False;
 if Win32Platform <> VER_PLATFORM_WIN32_NT then
 begin
   Result := True;
   Exit;
 end;

 psidAdministrators := nil;
 try
   if AllocateAndInitializeSid(SECURITY_NT_AUTHORITY, 2,
     SECURITY_BUILTIN_DOMAIN_RID, DOMAIN_ALIAS_RID_ADMINS,
     0, 0, 0, 0, 0, 0, psidAdministrators) then
   begin
     if CheckTokenMembership(0, psidAdministrators, bIsMember) then
       Result := bIsMember;
   end;
 finally
   if psidAdministrators <> nil then
     FreeSid(psidAdministrators);
 end;
end;

// IsUserAnAdmin.
function IsAdmin4: Boolean;
var
 hShell32: HMODULE;
 _IsUserAnAdmin: function(): BOOL; stdcall;
begin
 Result := False;

 hShell32 := LoadLibrary('shell32.dll');
 _IsUserAnAdmin := GetProcAddress(hShell32, 'IsUserAnAdmin'); // Do not localize
 if Assigned(_IsUserAnAdmin) then
   Result := _IsUserAnAdmin()
 else
   ShowMessage('Does not supported!');
end;