Do not explicitly release the account token that is returned by the Token property. The token is released by the Dispose method, which you can call in code. Dispose is also automatically called by the garbage collector.
The account token that is returned by the Token property is a duplicate of the Windows token that is used to create the WindowsIdentity object and is automatically released by the .NET Framework. This is different from the account token (the userToken parameter for the constructor), which is used to create the WindowsIdentity object. userToken is a Windows account token that is created by a call to LogonUser and must be closed to avoid a memory leak.