Every object (process, user, etc.) gets assigned an access token by the Local Security Authority
From Windows Vista on-wards, processes run on four integrity levels:
- System integrity process: SYSTEM rights
- High integrity process: administrative rights
- Medium integrity process: standard user rights
- Low integrity process: very restricted rights often used in sandboxed processes