The most common case in which a user will have both a filtered and fully privileged token is when the user is a member of the Administrators group.

• 如果用户是“管理员”组的成员,用户通常会同时具有经过滤的令牌和完全权限令牌。