Some time ago I wrote some code to allow a user to type an admin
password to allow my program to update HKLM. I used the sspi code
from MSDN. In the initializesecuritycontext I ask for
ISC_REQ_Delegation - the highest impersonation level. All the code
works and the process token is set to impersontate the admin account
with full rights to the key in HKLM I want to change.
Since installing XP SP2, the impersonation code works but when I go to
open the registery key I get error 1346 from regopenkeyex - bad
impersonation level. I dont get it - I asked for and got Delegation!
What has changed in XP SP2?