Pythin createprocessasuser -- OpenProcessToken, 'Access is denied.'

[Roger Upole]

No, AdjustTokenPrivileges doesn't actually add privileges.
It just enables privileges that you already have that aren't enabled
by default.  Administrative privileges (SE_SECURITY_NAME, SE_TCB_NAME, etc)
generally aren't enabled by default. You can use
win32security.LsaAddAccountRights
to add extra privileges to an account. (You can only do so from an admin
account,
of course)

        Roger

"Ivan Voras" <iv at an.voras.fer.hr> wrote in message
news:campmv$hih$2 at bagan.srce.hr...
> Roger Upole wrote:
>
> > You'll probably need to call AdjustTokenPrivileges before LogonUser,
since
> > you need
> > SE_TCB_NAME enabled for the calling process.
>
> Can processes started under users that don't have that privilege acquire
it
> just like that?