diff --git a/ntoskrnl/se/access.c b/ntoskrnl/se/access.c
index 4d248395922..a4f5cb0ee67 100644
--- a/ntoskrnl/se/access.c
+++ b/ntoskrnl/se/access.c
@@ -225,8 +225,8 @@ SepCreateClientSecurity(IN PACCESS_TOKEN Token,
         /* Do not use direct access and make a copy */
         ClientContext->DirectlyAccessClientToken = FALSE;
         Status = SeCopyClientToken(Token,
-                                   ImpersonationLevel,
-                                   0,
+                                   ClientSecurityQos->ImpersonationLevel,
+                                   KernelMode,
                                    &NewToken);
         if (!NT_SUCCESS(Status))
             return Status;