Win32 Impersonation

Michael Kelly mkelly2002 at earthlink.net
Fri Mar 29 15:21:18 EST 2002


On Fri, 29 Mar 2002 04:04:32 GMT, "Giganews" <orl_ando74 at hotmail.com> wrote:

>Upon reading the ActivePython docs, I found
>that the user who runs the impersonation script needs SE_TCB_NAME,
>SE_CHANGE_NOTIFY_NAME, and SE_ASSIGNPRIMARYTOKEN_NAME priveleges.
>
>Maybe I'm missing the point here, but the only two accounts on these systems
>with these priveleges are the administrator and the local system account.
>Obviously, if I already were the administrator I wouldn't have this problem.
>I think I'm missing something.

Are you using AdjustTokenPrivileges() and related APIs?
If not check the Win32 API docs for those calls and see
if it applies.


Mike

--

"I don't want to belong to any club that would have me as a member."
    -- Groucho Marx



More information about the Python-list mailing list