How to add SE_TCB_NAME privilege to process?

[Yang Lin]

Hi, all

About one month ago, I post a question to this group to ask how to
change security
context. Karsten tell me use LogonUser() and ImpersonateLoggedOnUser()
to do the
job. But the LogonUser() fail with error code 1314, which mean the
process don't
have SE_TCB_NAME privilege. Who know how to add the privilege to the
process?

My email: ftj...@email.mot.com

Thanks in advance.

Yang Lin.

[dave porter]

Granting of privileges is done by the security subsystem. Privs
are granted to users (security principals) not to processes.
Use "User Manager".

It may be that the TCB privilege needs to be explicitly
enabled with AdjustTokenPrivileges. You can only enable it
if it's been granted to you (well, that's the point, isn't it?).

You should not consider granting TCB privilege to just anyone.
It is arguably the most powerful priv around.

This is not a kernel programming question. Please post
such Win32 questions more carefully in future -- i.e., not here.

dave
--
For email, please remove the 'w' from my address. Sorry.

Yang Lin <ftj...@email.mot.com> wrote in article
<36269602...@email.mot.com>...