Southsoftware.com - Power tools for home and business users.

WebTweakTools.NET - Web site tweaking software.

more links...

Application that uses the RunAsUser_CreateProcess() function must be running under an account from Administrators group or as LocalSystem. The following privileges must be enabled for that account:

Name	Constant	Purpose
Act as part of the operating system	SeTcbPrivilege	For successful call of LogonUser and CreateProcessAsUser
Replace a process-level token	SeAssignPrimaryTokenPrivilege	For successful call of CreateProcessAsUser
Adjust memory quotas for a process (may be named "Increase memory quotas" or "Increase quotas" in Windows 2000 and NT 4.0)	SeIncreaseQuotaPrivilege	For successful call of CreateProcessAsUser
Bypass traversy checking	SeChangeNotifyPrivilege	For successful call of LogonUser
Debug programs	SeDebugPrivilege	For successful call of TerminateProcess
Create a token object	SeCreateTokenPrivilege	For successful call of ZwCreateToken/NtCreateToken

Note: In later versions of Windows (2003, Vista) the SeCreateTokenPrivilege privilege can be given only to the users from the Administrators group and cannot be provided for LocalSystem, while in previous versions of Windows (NT, 2000, XP) LocalSystem has SeCreateTokenPrivilege by default.

Note: Windows XP Home and Windows Vista Home do not contain secpol.msc snap-in, which provides User Rights Assignment section to the Control Panel, so if that is your case, you need some third-party tool to modify your account privileges. You can download our Polsedit tool from http://polsedit.southsoftware.com/. It will let you modify your account privileges and it is completely free to use.

Back to contents