Can someone please describe why impersonation requires the impersonator to
be local admin?

that's not the case. What problems are you seeing?

---
Dominick Baier, DevelopMentor
http://www.leastprivilege.com

Show quoteHide quote

PKI confusion...
How to validate client certificate?
VS2005 Throws Security Exception when run from Network!?
Windows Authentication in VB.Net Application
ASP.NET Cookie Handling
Client certificate error with web services
SignedXml gives false negatives when using namespaces in signed xm
recent security patch prevents desktop.ini CLSID folder-app association and custom icon
How to convert string to SecureString?
Get role for any given user name ...