how to get enough privilege to use LogonUser?

[TH Lim]

gerson.kurz at t-online.de (Gerson Kurz) wrote in message news:<3b9ccff5.6422250 at news.t-online.de>...
> On 10 Sep 2001 04:12:12 -0700, sshark97 at hotmail.com (TH Lim) wrote:
> 
> >Hi,
> >
> >I tried win32security.LogonUser(...) method according to the
> >ActiveState document. However, I was thrown the exception 'Not all
> >privileges referenced are assigned to the caller.'
> 
> Quote from MSDN: "In Windows 2000, the process calling LogonUser
> requires the SE_TCB_NAME privilege....In some cases, the process that
> calls LogonUser must also have the SE_CHANGE_NOTIFY_NAME privilege
> enabled; ... to log on a user with the LOGON32_LOGON_INTERACTIVE flag,
> the user (or a group to which the user belongs) must have the
> SE_INTERACTIVE_LOGON_NAME account right."
> 
> For more info, see http://msdn.microsoft.com

I have read this but I could not set SE_TCB_NAME without causing any exception.

/lim/