Overview#Primary Access Token (Microsoft Windows) the Microsoft Windows system uses the Primary Access Token for Access Control to Protected Resources and to control the ability of the user to perform various system-related operations on the local computer.
Primary Access Token is an object that describes the security context of a process or thread. The information in a token includes the identity and privileges of the user account associated with the process or thread.
When a user logs on, the system verifies the user's password by comparing it with information stored in a security database. If the password is authenticated, the system produces an access token. Every process executed on behalf of this user has a copy of this access token.