When a User try to run an application as Administrator they have two option, if they are belongs to administrators group they gone through YES or NO consent prompt. if they are standard user who doesn't have Admin Access they are asked for Admin User credentials which is CREDENDTIAL prompt. when users go through second flow it is obvious that after getting username and password we can generate User Access Token. but what is case for first flow ? I know this user has filtered token but How & from where does the UAC get this non limited token ?
I did go through UAC flow which is from MSDN but this part not documented properly.