Move as another logged-on user by stealing their token

On a multi-user host, duplicating the primary token of another session lets you act as that user, including a domain admin who logged in.