Look at the 'RunAs Service' component.
If you just want the secondary logon support and not the command line
'RunAs.EXE' utility then just add 'seclogon.dll' to your configuration and
register it during first boot. (See how the RunAs service' component does it
and use that as a template to create your own component).
RunAs is in the Image. I know found the "guilty" component - updating rdbss
component to last version disables the service. Since remote desktop works
fine with the previous version of rdbss.sys i think i'm fine with the older
one.