Token restriction
Concept
Understanding Restricted Tokens
How restricted tokens use dual DACL evaluation with restricting SIDs to narrow access to an intersection of two checks.
How-toCreating Restricted Tokens
Using idn filter to create restricted tokens with deny-only groups, removed privileges, and restricting SIDs.