mattifestation/PowerSploit — pull request #25 by clymb3r (2014-01-11 05:44:31+00:00)
Title: Bug fixes for Invoke-TokenManipulation

Processes could not be started when the script was being run from
Session 0. The fix is to use the CreateProcessAsUserW function when
running in Session 0. This API requires SeAssignPrimaryTokenPrivilege
priviege, so for non-session0 calls I still use CreateProcessWithTokenW
which does not require special privileges.