Important The constant ANYSIZE_ARRAY is defined as 1 in the public header Winnt.h. To create this array with more than one element, you must allocate sufficient memory for the structure to take into account additional elements.
sizeof(TOKEN_PRIVILEGES) естественно включает лишь первый элемент Privileges[]
