The ImpersonateLoggedOnUser function lets the calling thread impersonate the security context of a logged-on user. The user is represented by a token handle. If the current instance is already a thread token (=impersonated token), the method is just impersonating it. Otherwise if the current instance is a primary token, the method is converting it to a thread token and then impersonating it. However the second case is worth mentioning because the new thread token is not related to the current token instance. That means any operations on the current instance (e.g. set privileges) don't have an effect on the token of the thread. Create a new instance by calling TJwSecurityToken.CreateTokenByThread to get the new thread token or call ConvertToImpersonatedToken to get an thread token directly without creating a new instance.

TJwSecurityToken Methods