[SAMSRV/SYSSETUP]

Use proper access rights in calls to LsaOpenPolicy.

svn path=/trunk/; revision=57338

diff --git a/reactos/dll/win32/samsrv/setup.c b/reactos/dll/win32/samsrv/setup.c
index c3438bc..fed2772 100644 (file)
--- a/reactos/dll/win32/samsrv/setup.c
+++ b/reactos/dll/win32/samsrv/setup.c
@@ -471,7 +471,7 @@ SampGetAccountDomainInfo(PPOLICY_ACCOUNT_DOMAIN_INFO *AccountDomainInfo)
 
     Status = LsaOpenPolicy(NULL,
                            &ObjectAttributes,
-                           POLICY_TRUST_ADMIN,
+                           POLICY_VIEW_LOCAL_INFORMATION,
                            &PolicyHandle);
     if (Status != STATUS_SUCCESS)
     {

diff --git a/reactos/dll/win32/syssetup/security.c b/reactos/dll/win32/syssetup/security.c
index f958d2e..9df7669 100644 (file)
--- a/reactos/dll/win32/syssetup/security.c
+++ b/reactos/dll/win32/syssetup/security.c
@@ -38,7 +38,7 @@ SetAccountDomain(LPCWSTR DomainName,
 
     Status = LsaOpenPolicy(NULL,
                            &ObjectAttributes,
-                           POLICY_TRUST_ADMIN,
+                           POLICY_VIEW_LOCAL_INFORMATION | POLICY_TRUST_ADMIN,
                            &PolicyHandle);
     if (Status != STATUS_SUCCESS)
     {