Re: CreateProcessAsUser Doubt

From: Markus Eßmayr (essmayr/at/racon-linz.at)
Date: 06/30/04 

Date: Wed, 30 Jun 2004 17:09:00 +0200

please not, that you must have special privileges to call LogonUser to
create an interactive logon!
instead try using LOGON32_LOGON_BATCH instead!

max

"Victor Pereira" <taintmode@yahoo.com.br> wrote in message
news:eBnFDhqXEHA.2216@TK2MSFTNGP10.phx.gbl...
> Hi i'm trying to do a RunAs program and i have some doubts:
>
> 1 - Can i run it without a service ? Just calling :
>
> LogonUser - to get a user token
> DuplicateTokenEx - To duplicate my user´s token and set the permissions
> TOKEN_ADJUST_PRIVILEGIES and TOKEN_QUERY
> AdjustTokenPrivilegies - To set SE_TCB_NAME privilegies
> CreateProcessAsUser - To run my process as a specifc user.
>
>
> Because i´m receiving an error 1300 (decimail), which means "Not all
> privileges referenced are assigned to the caller".
>
> 2 - Can i adjust privilegies on an user´s token ? or i just can set
> privilegies on a process´s token ?
>
>
> Thanks in advance,
>
> Victor Pereira
>

Relevant Pages

  • Re: Win2000 Impersonation weirdness? (or is it a conundrum?)
    ... But why does the XP box work (allowing LogonUser calls from a process ... running without SE_TCB_NAME) while the Win2K does not? ... And what specifically do you mean by "system privileges"? ... > Is the server joined to a domain? ...
    (microsoft.public.security)
  • Re: Win2000 Impersonation weirdness? (or is it a conundrum?)
    ... But why does the XP box work (allowing LogonUser calls from a process ... running without SE_TCB_NAME) while the Win2K does not? ... And what specifically do you mean by "system privileges"? ... > Is the server joined to a domain? ...
    (microsoft.public.win2000.security)
  • Re: CreateProcessWithLogonW error
    ... I would recommend just using LogonUser. ... to write code to turn those privileges on either. ... There is an additional restriction with CreateProcessWithLogonW that you may ... > service) and create a named pipe between the Apache service and this ...
    (microsoft.public.platformsdk.security)
  • Re: CreateProcessAsUser error "the client does not have the required priviledges"
    ... LogonUser again? ... ImpersonateLoggedUser (my process have administrator privileges) ... but if I execute it under unprivileged ...
    (microsoft.public.platformsdk.security)
  • Re: LogonUser failed error
    ... Windows 2000 the process calling LogonUser needs to have SE_TCB_NAME (Act as ... > I know the error is because of some privileges. ... > I enabled privileges using this: ...
    (microsoft.public.dotnet.general)