The Seclogon Shortcut — Spawning SYSTEM Processes via CreateProcessWithTokenW

How a built-in Windows service does the dirty work for you — converting Impersonation tokens to Primary tokens behind the scenes, letting you spawn processes as SYSTEM with fewer privileges and less c