As I understand, on Windows systems, a thread "gets" it\'s own token, separate from the process\' token, upon impersonation.
One way to test that - the
