How to disable SeImpersonate Privilege for a user having local Service rights ?

Hello

SeImpersonatePrivilege is a Windows security setting that is assigned by default to the device's local Administrators group and the Local Service account.
The role is to determine which programs are allowed to impersonate a user or other specified account and perform actions on behalf of the user.

If you need to disable SeImpersonatePrivilege, try the following steps:

1. Click Start, point to Programs, point to Administrative Tools, and then click Local Security Policy.
2. Expand Local Policies, and then click User Rights Assignment.
3. In the right pane, double-click Impersonate a client after authentication.
4. In the Local Security Policy Setting dialog box, click Delete.
5. In the Select Users or Group dialog box，click the user account that you want to delete，click Delelte, and then click OK.
6. Click OK

For more information, please refer to the following documents:
https://learn.microsoft.com/en-us/troubleshoot/windows-server/windows-security/seImpersonateprivilege-secreateglobalprivilege

Best Regards,
Wesley Li

Do you have any other questions?

If the above reply is helpful to you, please mark it as answer.

Thanks

Hello

Do you have any further questions?

How is the issue progressing so far?

Thanks