id	summary	reporter	owner	description	type	status	milestone	component	version	severity	resolution	keywords	cc
2111	RunAs broken when Authenticated Users added to Replace a process level token	caplant@…	Valik	"We have an application that adds 'Authenticated Users' to 'Replace a process level token' security on XP machines (via secpol.msc). Once this is in place & the PC rebooted AutoIt's RunAs fails. 

I'm using RunAs to grant local support staff access to an Admin Console so they don't have to logoff the current user. This feature is broken on several thousand machines where the bogus security modifying app is installed. The problem has existed for a several years now & we JUST found the root cause.

These are XP SP3 x86 devices joined to a domain. 

Working (Windows Default):
Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Replace a process level token
                Network Service, Local System

Broken:
Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Replace a process level token
                Authenticated Users, Network Service, Local System

http://technet.microsoft.com/en-us/library/cc784623(WS.10).aspx
"	Bug	closed	3.3.9.1	AutoIt	3.3.6.1	None	Fixed	RunAs, Replace a process level token