>We are using the LogonUser & ImpersonateLoggedOnUser functions to bypass using mapped drives for data access. This has been working fine on WinXP machines. We tried to use the same technique on a Win2000 PC, but it didn't work. We discovered that these functions can't be used w/ Win2000 unless the user's rights for the SE_TCB_NAME setting is at administrator-like level. This won't work for us, b/c our users' PC's are set w/ limited access to their C: drives.
>
>Any ideas? We really like using the LogonUser, etc. functions. We can't change the SE_TCB_NAME settings.

Randy,

AFAIK, there's no way around SE_TCB_NAME privilege requrement for LogonUser() under Win2K.