Hi Fred,

>I guess it is something to do with SE_TCB_NAME right. Has anyone gotten the solution for this.

Yes, that's the way it is in Windows 2000. You need the SE_TCB_NAME privilege in order to call LogonUser. There are no easy solutions for that. You could use a service or a COM object to execute code as a different user, but you cannot impersonate a different users in your application. The easier solution would really be to upgrade to Windows XP.