I need to set the "replace a process level token" permission on the account chef will be using, and am currently using @Matt_Wrock's hint, but would like to use the new native windows_user_privilege resource. There's nothing in the docs saying so, but I am assuming the resource requires the user to log out and back in? Or does this resource magically make the change right away?