JSI Tip 7227. Programs that use impersonation, like SU.EXE, may not work after applying Service Pack 4 to Windows 2000?

Prior to SP4, no special right was required to impersonate a client.

Starting with SP4, the Impersonate a client after authentication user right is required for the account that will run the impersonation program.

To resolve this problem:

1. Use the Local Security Policy snap-in from the Administrative Tools folder on your Start menu.

2. Expand Local Policies.

3. Press User Rights Assignment

4. Double-click Impersonate a client after authentication in the right-hand pane.

5. Press Add on the Local Security Policy Setting dialog.

6. In the Select Users or Group dialog , select the user account that you want to add and press Add.

7. Press OK and OK.

Hide comments


  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.