title: What are different types of windows token and how they differ?
body: <p>Recently I have been dealing with windows LogonUser API. The LogonUser api returns different token depending on the dwLogonType passed to the API. The document mentions:</p>
  
  <blockquote>
    <p>• The function returns an impersonation token, not a primary token. You
    cannot use this token directly in the CreateProcessAsUser function.
    However, you can call the DuplicateTokenEx function to convert the
    token to a primary token, and then use it in CreateProcessAsUser.</p>
    
    <p>• If you convert the token to a primary token and use it in
    CreateProcessAsUser to start a process, the new process cannot access
    other network resources, such as remote servers or printers, through
    the redirector. An exception is that if the network resource is not
    access controlled, then the new process will be able to access it.</p>
  </blockquote>
  
  <p>I am totally confused on different token types. I want to understand on what are different windows token types and how they differ?</p>