On Microsoft Windows, when impersonating the anonymous token in an LPAC the WIN://NOAPPALLPKG security attribute is ignored leading to impersonating a non-LPAC token leading to privilege escalation.
ea9947419e769dd9e18edeb304390de5704daee25ebd8b4d342bdc9bfc87ebea