I believe you will have to PInvoke the LsaEnumerateAccountRights function to see if an account has that privilege. Use LsaAddAccountRights function to add a privilege to an account.
The privilege in question is "SeServiceLogonRight". http://www.pinvoke.net/default.aspx/advapi32/LsaEnumerateAccountRights.html http://www.pinvoke.net/default.aspx/advapi32/LsaAddAccountRights.html Michael Willers wrote a general wrapper to add or remove privileges for an account here: http://staff.newtelligence.net/michaelw/PermaLink,guid,8553fd25-ef25-4050- 84e9-c85800d80238.aspx =================================== This list is hosted by DevelopMentorĀ® http://www.develop.com View archives and manage your subscription(s) at http://discuss.develop.com