When I run my application , the LogonUser method fails the exception is
"LogonUser failed with error code :1314".
I know the error is because of some privileges .
I am using Windows 2000 sp4. I have not enabled the SE_TCB_NAME previlege.
Do we need to enable this ?
I enabled privileges using this:
ManagementObject mo = new ManagementObject(new ManagementPath( ));
mo.Scope.Options.EnablePrivileges = true;
I am still getting this same error.
I also checked System.Security.Principal.WindowsIdentity().GetCurrent.Name
It returns "@\machine_name\ASPNET"
But to the user "ABC" I have enabled the TCB privileges .
What am I missing ?
Martin Dechev - 14 Oct 2004 14:40 GMT
Hi,
If I understand correctly that you are trying to invoke LogonUser (in
AdvApi32.dll), the documentation for the function clearly states that for
Windows 2000 the process calling LogonUser needs to have SE_TCB_NAME (Act as
part of the operating system) privilege.
http://msdn.microsoft.com/library/en-us/secauthn/security/logonuser.asp
(in the remarks section)
Greetings
Martin
> When I run my application , the LogonUser method fails the exception is
> "LogonUser failed with error code :1314".
[quoted text clipped - 16 lines]
>
> What am I missing ?