Policy Server Guides › Policy Server Configuration Guide › Impersonation › Security Considerations for Impersonation › Restricting Impersonation

Restricting Impersonation

For an impersonation to take place, the impersonator and impersonatee must be bound to policies in an impersonation realm. The impersonator policy must have a rule that fires for the ImpersonateStart event and the impersonatee policy must fire for the ImpersoanteStartUser event. The processes for configuring these objects are described in Policy Server Objects for Impersonation.