When I run cmd.exe from the Start button, then run "whoami /groups" in order to view the access token, I see that the Administrators group is not in my access token. That's good - I want to not have Administrators in my access token. The problem is, when I run another program from the Start button - \cygwin\bin\mintty (which gives me an interactive shell), then run "whoami /groups" from that shell, I see that I am in Administrators:
BUILTIN\Administrators Alias S-1-5-32-544 Mandatory group, Enabled by default, Enabled group
I do not want to be in the Administrators group when I run mintty.exe. What is causing Administrators to become part of my access token, when I run \cygwin\bin\mintty.exe (but not when I run cmd.exe)? How do I stop that from happening?