Token Privilege Escalation via SeImpersonate

A process running with enabled SeImpersonatePrivilege or SeAssignPrimaryTokenPrivilege may impersonate a client or use an eligible token to create a process in another security context. Some Potato-family procedures attempt to obtain a privileged service token through local RPC/COM or named-pipe interactions and use it for SYSTEM-context execution. Possessing either privilege alone does not guarantee SYSTEM: an eligible token-acquisition path, service/account context, and compatible Windows build and configuration are also required. The local-account and Administrators-group change shown later is a separate post-escalation persistence action, not part of token privilege abuse.