Question about privileges required to call LoadUserProfile from ASP.NET webservice

[Shawn Anderson]

I am trying to call LoadUserProfile from within an ASP.NET webservice. I
have set the process to run under an impersonated account that is an
administrator -- however, everytime I try to execute the LoadUserProfile
call, I get a message saying that a "Required privlege is not help by
client" or something very close to that message.

I have tried adding to the process and user handle the SeTcbPrivilege,
SeChangeNotifyPrivilege, as well as just about every other privilege that I
can think of. But still keep getting the same error.

Can anyone offer anything thoughts or suggestions?

Thanks
Shawn Anderson

 

[Ivan Brugiolo [MSFT]]

If you enable auditing for privilege usage in secpol.msc,
you should have the name of the missing privilege in the Security Event Log
file.

 

[Shawn Anderson]

The suggestion was a good one, however for some reason no error/failure is
displayed on any of the systems I am testing on.

 

[Shawn Anderson]

Thanks but I saw that already

I have verifiied that both the calling process and calling thread have the
privilege.

Shawn