diff --git a/ntoskrnl/se/token.c b/ntoskrnl/se/token.c
index fb1b0a52159..cd320a8dcdf 100644
--- a/ntoskrnl/se/token.c
+++ b/ntoskrnl/se/token.c
@@ -3585,7 +3585,7 @@ SeTokenCanImpersonate(
      * allow impersonation. If we get such levels from the call
      * then something's seriously wrong.
      */
-    ASSERT(ImpersonationLevel != SecurityAnonymous ||
+    ASSERT(ImpersonationLevel != SecurityAnonymous &&
            ImpersonationLevel != SecurityIdentification);
 
     /* Time to lock our tokens */