LinkedToken returns the linked token of this token. In vista every token can have a second token that has more or less rights. The UAC uses this token to assign it to a new process with elevated rights. However this token is useless for non privileged tokens because SetThreadToken and other functions which get this token checks whether the user can use this token or not.

This function only works in Windows Vista and newer. The caller is responsible for freeing the resulting TJwSecurityToken 

If the compiler directive VISTA (jwscl.inc) is not defined, an exception EJwsclVistaFeaturesDisabled is raised. This feature can only be used with activated VISTA compiler directive. 

The token must be converted to a primary token first to be usable in CreateProcessAsUser. However this duplication needs the TCB privilege even if the linked token has less rights.

TJwSecurityToken Properties