The quick answer is you have to Pinvoke LsaEnumerateAccountRights to find out what rights a particular account has the "SeDenyInteractiveLogonRight"- -which means that account can't login locally.
Of course, it's much easier said then done... There was a recent thread on this list discussing the ability to test/set the logon-as-service right (same logic, looking for "SeServiceLogonRight"). That thread seemed to delegate to http://www.codeproject.com/csharp/lsadotnet.asp; but, I don't think that actually "tests" whether an account has a particular right or not. On Fri, 5 Jan 2007 10:16:00 -0800, Mont Rothstein <[EMAIL PROTECTED]> wrote: >Yes, that is what I mean. > >Is there a way to determine which acounts do or don't have local login >rights? =================================== This list is hosted by DevelopMentor® http://www.develop.com View archives and manage your subscription(s) at http://discuss.develop.com
