We've recently encountered an interesting problem:
One of our applications had a service using .net remoting with impersonation turned on.
Inside this service we had some code using WindowsIdentity.GetCurrent() to find the user in AD and check some of its properties.
Our issue was thus:
Xlogs in …