ParentFull threadLoranubi·There is `AdjustTokenPrivileges` and `CreateRestrictedToken` which can accomplish something like that.View on HN