TokenSnatcher will allow any local administrator to view all identities running a process with high or system integrity level. If desired, the user can then select any of the ID's after which TokenSnatcher will start a command prompt running as the selected ID. Any application started from the command prompt will inherit the ID. The process is fully network capable so it allows you to use the credentials to connect to external resources like file shares, Active Directory, etc. You must have local administrator rights, but you don't need any domain rights. This practically means you can become domain admin if a domain admin is logged on to your system.