Run with highest privileges
This token is used to create the shell. So you have standard user rights. When you click an executable and select "run as administor", the full token is used which contains admin rights. When you now configre Task scheduler and select "Run with the highest privileges", the full token (admin rights) is used. This only works if the user is in the admin group, because only those users have 2 tokens.