Starts a process in the caller's local security context while associating a separate LSA logon session with supplied credentials for outbound network authentication. The /netonly option does not change the process's local token or elevate local privileges. Windows does not validate the supplied credentials when the process starts, so the process can launch even when later network authentication will fail.
Variant:
Launch with parent-process spoofing
powershell
RESTRICTED_ACCESS_BLUR_MARKER
RESTRICTED_ACCESS_BLUR_MARKER
RESTRICTED_ACCESS_BLUR_MARKER
RESTRICTED_ACCESS_BLUR_MARKER