question about SHGetFolderPath warnings   

my question is, how seriously do we need to take those SHGetFolderPath 
warnings (about not using approved methods to get folder paths, e.g. Start 
Menu)?  will those warnings prevent us from getting logo certified?

one of the things that our installer does is to check the Start Menu folders 
of all users on the system, not just the current user, in order to perform 
various cleanup tasks.  the way we locate a specific user's folders is to 
load their registry hive and then access 
HKEY_USERS\sid\SOFTWARE\Microsoft\...\Explorer\Shell Folders.

the approved method requires us to use SHGetFolderPath, which means that in 
order to access a specific user's folders we would need an impersonation 
token, which would require us to know the user's password.  this is not 
information that is available to our application, nor should it be.

I've heard of an undocumented system call NtCreateToken, but I don't know 
how to call it and it seems like overkill.

or can we just safely ignore those SHGetFolderPath warnings?

    thanks,
    Mark

date: Tue, 27 Nov 2007 09:24:02 -0800   author:   marko