[Question] A specified logon session does not exist. It may already have been terminated.

[m8r1us]

Super interesting research, thank you for publishing the code.

Maybe you can give me a quick hint. I am trying to use the use case on a domain joined Windows 10 client instead of a non-domain joined one. I do not need the reg keys if the machine is domain joined? With or without the CREATE_NEW_CONSOLE opens a new window with the "running as the user from the pfx". But when I check with the tokens klist I get:

Current LogonId is 0:0x1490514
Error calling API LsaCallAuthenticationPackage (ShowTickets substatus): 1312

klist failed with 0xc000005f/-1073741729: A specified logon session does not exist. It may already have been terminated.

Thank you