User Rights Assignment - Obtain an impersonation token for another user in the same session

[Aurimas N]

I'm trying to add users to specific "user rights assignments" via powershell with wrapped LSA methods, however I can't find what "constant name" should be used for the "Obtain an impersonation token for another user in the same session" policy?

It is not listed here: User Rights Assignment (Windows 10)

or anywhere else I've looked.


I've tried using "SeOpenProcessToken" but it does not seem to work:

Exception calling "EnumerateAccountsWithUserRight" with "2" argument(s): "A specified privilege does not exist"

Server 2016.

Continue reading...