The server can impersonate the client for ACL checking, but it cannot access system objects as the client. The server can impersonate the client's security context while acting on behalf of the client. This level of impersonation can only be used to access resources on the server's machine. DCE public key authentication. No capability flags.
Mutual authentication is supported automatically by some authorization services.
The client's identity is determined during every call on a proxy. CoInitializeSecurity uses the security information read from the registry. Display the current principal name. Free the memory allocated by QueryBlanket.