title: SSPI: acquire credentials for another user from a process running with local admin privileges
body: <p>I am running a process with loacl admin privilege in Windows and trying to obtain a credential handle for another user using <strong>AcquireCredentialsHandle</strong> .
  It is possible to pass in SEC_WINNT_AUTH_IDENTITY structure with user info ( e.g. user, domain, password) and obtain the handle. I have verified it. Without the SEC_WINNT_AUTH_IDENTITY passing only the pszPrincipal does not work.</p>
  <p>I wonder is there any other way one can do it without providing the user password?</p>
  <p>I am running the following scenario:</p>
  <ol>
  <li>Client obtains a kerberos token using UPN and sends it to server</li>
  <li>Server tries to acquire the credential handle (AcquireCredentialsHandle) using UPN of the client.</li>
  </ol>
  <p>Any suggestions please?</p>