LogonUser failed error

[Nimi]

When I run my application , the LogonUser method fails the exception is
"LogonUser failed with error code :1314".
I know the error is because of some privileges .

I am using Windows 2000 sp4. I have not enabled the SE_TCB_NAME previlege.
Do we need to enable this ?

I enabled privileges using this:

ManagementObject mo = new ManagementObject(new ManagementPath( ));
mo.Scope.Options.EnablePrivileges = true;

I am still getting this same error.


I also checked System.Security.Principal.WindowsIdentity().GetCur rent.Name
It returns "@\machine_name\ASPNET"

But to the user "ABC" I have enabled the TCB privileges .

What am I missing ?

[Martin Dechev]

Hi,

If I understand correctly that you are trying to invoke LogonUser (in
AdvApi32.dll), the documentation for the function clearly states that for
Windows 2000 the process calling LogonUser needs to have SE_TCB_NAME (Act as
part of the operating system) privilege.

[url]http://msdn.microsoft.com/library/en-us/secauthn/security/logonuser.asp[/url]
(in the remarks section)

Greetings
Martin
"Nimi" <anonymous@discussions.com> wrote in message
news:OPwOqxesEHA.3412@TK2MSFTNGP14.phx.gbl...

> When I run my application , the LogonUser method fails the exception is
> "LogonUser failed with error code :1314".
> I know the error is because of some privileges .
>
> I am using Windows 2000 sp4. I have not enabled the SE_TCB_NAME

previlege.

> Do we need to enable this ?
>
> I enabled privileges using this:
>
> ManagementObject mo = new ManagementObject(new ManagementPath( ));
> mo.Scope.Options.EnablePrivileges = true;
>
> I am still getting this same error.
>
>
> I also checked System.Security.Principal.WindowsIdentity().GetCur rent.Name
> It returns "@\machine_name\ASPNET"
>
> But to the user "ABC" I have enabled the TCB privileges .
>
> What am I missing ?
>
>
>