Introduction Tokenmon is a application that monitors and displays a variety of security-related activity taking place on a system. Tokenmon gets its name from the fact that Windows NT/2000 stores a process security information, including the user account context in which the process executes, in an object called a token. The security activity Tokenmon monitors includes the following: ·　　Logon/logoff ·　　Enabling and disabling of privileges ·　　Impersonation ·　　Process creation/exit Tokenmon has advanced filtering and search capabilities that make it a powerful tool for exploring the way NT works, seeing how applications use security functions, or tracking down problems in system or application configurations. Tokenmon works on NT 4.0 and Windows 2000.-Introduction Tokenmon is a application that monitors and displays a variety of security-related activity taking place on a system. Tokenmon gets its name from the fact that Windows NT/2000 stores a process security information, including the user account the context in which the process executes, in an object called a token. The security Tokenmon monitors activity includes the following : Logon / logoff Enabling and disabling of privileges Impersonation Process creation / exit Tokenmon has advanced filtering and search capabilities that make it a powerful tool for exploring the way NT works, seeing how applications use security functions, or tracking down problems in system or application configurations. Tokenmon works on NT 4.0 and Windows 2000.