Privilege config. problem

From: Alexander Müller (pc_alex_at_usa.net)
Date: 10/16/03 

Date: Thu, 16 Oct 2003 14:36:46 +0200

For calling LogonUser on W2K, I need the SeTcbName privilege. When calling
"LsaEnumerateAccountRights" to enumerate my privileges, I receive only one
("SeBatchLogonRight"), nothing more.

My account is member of an AD-Domain, member of the
"Domain-Administrators-Group".

I tried to configure it, but It doesn't work. I granted the privilege "Act
as part of the operating system" in "local security policy", as well as in
"security policy for domains", as well as in "security policy for domain
controllers".

But even after rebooting, the privilege is not listed with
LsaEnumerateAccountRights.

The machine is a W2K Server that acts as PDC.

Is there anything I might have forgotten ?

Relevant Pages