Symptoms
When you apply the Obtain an impersonation token for another user in the same session (SeDelegateSessionUserImpersonatePrivilege) privilege from the Windows Server 2016 or Windows 10 1607 client to the Windows Server 2008 Service Pack 2 (SP2), you may experience the following issues:
SceCli event ID 1202 with error "0x4b8"
Event ID 1000 with the faulting module name "scesrv.dll" and the exception code "0xc0000409"
Moreover, the services.exe process stops working and the computer enters a restart loop.
Note This privilege is first introduced in Windows Server 2016.
How to get this update
Method 1: Windows Update
This update is provided as an Optional update on Windows Update. For more information about how to run Windows Update, see How to get an update through Windows Update.
Method 2: Microsoft Update Catalog
To get the stand-alone package for this update, go to the Microsoft Update Catalog website.
More information
Prerequisites
To install this update, you must have Windows Server 2008 SP2 installed.
Registry information
To apply this update, you don't have to make any changes to the registry.
Restart requirement
You must restart the computer after you apply this update.
Update replacement information
This update does not replace a previously released update.
Status
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
References
Learn about the terminology that Microsoft uses to describe software updates.
