>It's overwhelmingly likely that while the account may be granted the privilege, you need to set the process token set using AdjustTokenPrivilege() API call. The following is cut from the MSDN docs ...(snip)

Hi Ed,

I went back and read the LogonUser() function in the MSDN carefully and it indicates in the Remarks section that "The privilege does not need to be enabled. The LogonUser function enables the privilege as necessary." In light of this, do you think the enabling code you posted should be necessary to run the function? If not, any other idea on why the function would fail with the privilege granted?

Bill