[Meaning] Only the enabled aspects of the client's security context are available to the server. If you do not specify this flag, all aspects of the client's security context are available. This allows the client to limit the groups and privileges that a server can use while impersonating the client. [Security flag] 
SECURITY_EFFECTIVE_ONLY