CreateProcessAsUser Doubt

[Victor Pereira]

Hi i'm trying to do a RunAs program and i have some doubts:

1 - Can i run it without a service ? Just calling :

LogonUser - to get a user token
DuplicateTokenEx - To duplicate my user´s token and set the permissions
TOKEN_ADJUST_PRIVILEGIES and TOKEN_QUERY
AdjustTokenPrivilegies - To set SE_TCB_NAME privilegies
CreateProcessAsUser - To run my process as a specifc user.


Because i´m receiving an error 1300 (decimail), which means "Not all
privileges referenced are assigned to the caller".

2 - Can i adjust privilegies on an user´s token ? or i just can set
privilegies on a process´s token ?


Thanks in advance,

Victor Pereira

 

[zap]

in win2k this priveleges have only processes under SYSTEM account.
You can create your service and run under SYSTEM.

ps. IMHO, there is no problems in XP