Microsoft KB Archive/131144

{|
 * width="100%"|

-

The information in this article applies to:


 * Microsoft Win32 Application Programming Interface (API), included with:
 * Microsoft Windows NT 3.51

-

SUMMARY
Some new security API calls were added to Win32 in Windows NT version 3.51. Two of these new calls, LogonUser and CreateProcessAsUser, require that the calling process have certain privileges. If the calling process is a service running in the Local System account, it will already have these privileges. Otherwise, the required privileges can be added to an account by using the "User Rights Policy" dialog box. Run the User Manager and choose User Rights from the Policies menu to see the dialog box.

NOTE: You must select the "Show Advanced User Rights" check box to see the privileges mentioned in this article.

MORE INFORMATION
The Win32 API reference documents the required privileges, but it gives their internal string names instead of the display names. The "User Rights Policy" dialog box displays the privileges using the display names.

The following table shows the display names associated with the internal string names:

  Privilege                        Display Name SeTcbPrivilege                  Act as part of the operating system SeAssignPrimaryTokenPrivilege   Replace a process level token SeIncreaseQuotaPrivilege        Increase quotas Additional query words:

Keywords         : kbnetwork kbAPI kbKernBase kbNTOS351 kbSDKPlatform kbSecurity kbGrpNet Version          : winnt:3.51 Platform         : winnt Issue type       : kbhowto
 * }