Specify the list of Users to 'Replace a process level token'
|ID: oval:org.secpod.oval:def:22532||Date: (C)2015-01-07 (M)2017-10-16|
|Class: COMPLIANCE||Family: windows|
This policy setting allows one process or service to start another service or process with a different security access token, which can be used to modify the security access token of that sub-process and result in the escalation of privileges.
|Microsoft Windows 8.1|