Obtaining a Delegation Token

See more:

C#

impersonation

I am having trouble getting the correct type of impersonation token using WindowsIdentity.impersonate(). My code attempts to access a file share using the account of the user who is running it, who has been denied access to it. When this process fails the I attempt to impersonate the Administrator account, who has access to the file share, and access it again. However the ImpersonationLevel of my WindowsImpersonationContext is Impersonation, not Delegation. I have ensured that my process has the SeTcbPrivilege enabled and that the machine that the code runs on has constrained delegation enabled.

From my understanding I am not able to access the file share because it is a network resource, and to access a network resource I need to have a Delegation ImpersonationLevel, Impersonation will only work for accessing resources on the local system (which I have verified as working). Under the properties for my machine on AD I have the cifs service added for WIN-J5H5R939SN7 under the delegation settings.

Are there any other steps I need to take to receive a Delegation token?

using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.Security.Principal;
using System.Security;
using System.IO;

namespace DelegationTest
{
    class Program
    {

        static bool printDirectory(string directory)
        {
            Console.WriteLine("Attempting to read directory " + directory + " as " + WindowsIdentity.GetCurrent().Name);
            try
            {
                DirectoryInfo dirInfo = new DirectoryInfo(directory);
                FileInfo[] files = dirInfo.GetFiles();
                foreach (FileInfo f in files)
                {
                    Console.WriteLine(f.FullName);
                }
            }
            catch (Exception e)
            {
                //Console.WriteLine(e.ToString());
                Console.WriteLine(e.Message);
                return false;
            }
            return true;
        }
        static void Main(string[] args)
        {
            string dir = @"\\WIN-J5H5R939SN7\demoCA";
            if (!printDirectory(dir))
            {
                Console.WriteLine("Attempt to impersonate Administrator and try again");
                string userName = "Administrator";
                WindowsIdentity wid = new WindowsIdentity(userName);
                WindowsImpersonationContext wic;
                try
                {
                    wic = wid.Impersonate();
                    System.Console.WriteLine(wid.ImpersonationLevel.ToString());
                    printDirectory(dir);
                    wic.Undo();
                }
                catch (Exception e)
                {
                    System.Console.WriteLine(e.Message);
                }
            }

        }
    }
}