I am running Windows 10.
This is the way I understood Windows UAC:
A normal admin user has one access token for his admin account and one access token from which most of the special privileges are removed. The admin token is only used when the user explicitly confirms, that he/she wants to run an application as administrator.
My question is:
Does a program that I execute with elevated privileges really always use the same access token?
I started to doubt that because things I did as an administrator (mapping network drives) did not last after I logged off and on again. Might this be because of a mechanism in UAC that somehow prevents my elevated actions to be remembered, like that the access token always changes and therefore can't be recognized after logoff for example.