LogonUser failed error

[Nimi]

When I run my application , the LogonUser method fails the exception is
"LogonUser failed with error code :1314".
I know the error is because of some privileges .

I am using Windows 2000 sp4. I have not enabled the SE_TCB_NAME previlege.
Do we need to enable this ?

I enabled privileges using this:

ManagementObject mo = new ManagementObject(new ManagementPath( ));
mo.Scope.Options.EnablePrivileges = true;

I am still getting this same error.


I also checked System.Security.Principal.WindowsIdentity().GetCurrent.Name
It returns "@\machine_name\ASPNET"

But to the user "ABC" I have enabled the TCB privileges .

What am I missing ?

 

[Martin Dechev]

Hi,

If I understand correctly that you are trying to invoke LogonUser (in
AdvApi32.dll), the documentation for the function clearly states that for
Windows 2000 the process calling LogonUser needs to have SE_TCB_NAME (Act as
part of the operating system) privilege.

http://msdn.microsoft.com/library/en-us/secauthn/security/logonuser.asp
(in the remarks section)

Greetings
Martin