diff --git a/dlls/advapi32/security.c b/dlls/advapi32/security.c
index 4b2876d216c..802743401af 100644
--- a/dlls/advapi32/security.c
+++ b/dlls/advapi32/security.c
@@ -6172,7 +6172,7 @@ BOOL WINAPI SaferComputeTokenFromLevel(SAFER_LEVEL_HANDLE handle, HANDLE token,
 {
     FIXME("(%p, %p, %p, %x, %p) stub\n", handle, token, access_token, flags, reserved);
 
-    *access_token = (HANDLE)0xdeadbeef;
+    *access_token = (flags & SAFER_TOKEN_NULL_IF_EQUAL) ? NULL : (HANDLE)0xdeadbeef;
     return TRUE;
 }
 
diff --git a/include/winsafer.h b/include/winsafer.h
index 25654846d9f..02150c599e7 100644
--- a/include/winsafer.h
+++ b/include/winsafer.h
@@ -30,6 +30,11 @@ extern "C" {
 
 DECLARE_HANDLE(SAFER_LEVEL_HANDLE);
 
+#define SAFER_TOKEN_NULL_IF_EQUAL   0x00000001
+#define SAFER_TOKEN_COMPARE_ONLY    0x00000002
+#define SAFER_TOKEN_MAKE_INERT      0x00000004
+#define SAFER_TOKEN_WANT_FLAGS      0x00000008
+
 #define SAFER_MAX_HASH_SIZE 64
 
 #include <pshpack8.h>