I am trying to use the API function LogonUser() to verify an NT login ( the VFP code was posted by R. Strahl a while back ). I have gotten the function to work on my NT workstation but not on my NT Server.

The same account is being used on both machines. The account is in the administrator group on both machines and I made sure the account has the "Act as part of the operating system" privilege on the NT Server. On the NT Server I consistently get the GetLastError() return of 1314 ( privilege not held ).

It was suggested the privilege has to be enabled but the MSDN Help says LogonUser() will enable the privilege as needed and I am not doing this on the NT Workstation which gives success. It was suggested to try a different logon type ( other than LOGON32_LOGON_NETWORK ). I tried LOGON32_LOGON_INTERACTIVE, LOGON32_LOGON_BATCH and LOGON32_LOGON_SERVICE as tests, all unsuccessful.

I am assuimg there is some difference security wise but a comparison between the privileges granted on the NT Workstation and Server are pretty much the same. The logon on the NT Workstation is successful as long as I supply the Domain name, but is not successful for a local account database logon attempt ( "." for the Doamin ).

Does anyone have any other ideas of the security issues ( or anything else ) that might be preventing me from getting this to work on the NT Server?

Thanks,
Bill