. . "An access token is an object that describes the security context of a process or thread." . .