46 Cyber seCurity essentiAls
other difference is that impersonation tokens also have an associated
impersonation level.
e impersonation levels are anonymous, identification, imperson-
ation, and delegation. With an anonymous token at its processing whim,
a program cannot identify the user of the token, nor can it impersonate
the token. Anonymous tokens do little more than fill function require-
ments that a token exists. Anonymous tokens are like a motorist hav-
ing no driver’s license at all; the motorist is not identifiable.
Identification tokens are the next impersonation level. A program
that possesses an identification token can inspect the user of the token,
the group memberships of the token, and any privileges that the token
has enabled. Ide ...