TMSSUSERINHERIT allows an account to be created that has no access, but has an inherit permissions flag.

Once that User has been authenticated a command can be sent to the server telling it to copy another User's access list to that empty shell

set TMSSUSERINHERIT=userID