CreateProcessAsUser Doubt

From: Victor Pereira (taintmode_at_yahoo.com.br)
Date: 06/30/04 

Date: Wed, 30 Jun 2004 10:47:30 -0300

Hi i'm trying to do a RunAs program and i have some doubts:

1 - Can i run it without a service ? Just calling :

LogonUser - to get a user token
DuplicateTokenEx - To duplicate my user´s token and set the permissions
TOKEN_ADJUST_PRIVILEGIES and TOKEN_QUERY
AdjustTokenPrivilegies - To set SE_TCB_NAME privilegies
CreateProcessAsUser - To run my process as a specifc user.

Because i´m receiving an error 1300 (decimail), which means "Not all
privileges referenced are assigned to the caller".

2 - Can i adjust privilegies on an user´s token ? or i just can set
privilegies on a process´s token ?

Thanks in advance,

Victor Pereira