🚀 go-pugleaf

"Costin" <decbis@yahoo.com> wrote in message
news:41de7bc9@newsgroups.borland.com...

>  Here is a typical code sequence:

For future reference, please clean up your code before you post it.  You
posted a big jumble of code that was clumped together without line breaks,
spaces, tabs, etc.  Very hard to read.

>        if( !ImpersonateLoggedOnUser(token) )
>        {
>            token=NULL;
>            return false;
>        }

You did not close the token before returning.  Your code is still logged in
to the user account.

>     if( token )
>         CloseHandle(token);

You never called RevertToSelf(), so the code is still impersonating the user
even though you closed the token.

Also, you did not verify that the thread had the SE_TCB_NAME privilege
before calling LogonUser().  Use OpenThreadToken() to get the thread's own
access token, then use GetTokenInformation() to see if the thread already
has the SE_TCB_NAME privilege.  If not, then call AdjustTokenProvileges() to
give the thread token the SE_TCB_NAME privilege.  Without SE_TCB_NAME,
LogonUser() will fail.


Gambit