I am trying to use cfx_users tag with the isvalid action. I am getting the following error:

API function LogonUser caused error 1314 (A required privilege is not held by the client) [Line 2541, v2.11gamma-OPEN].

My research indicates that the user account calling the tag and which calls the Windows API function LogonUser needs to have "act as part of the operating system" and perhaps "create token object" and "logon locally". What user account is being utilized when this tag is executed? I would think it would be the account used by the ColdFusion services. I gave that account all the mentioned privileges but I still have the same problem. I also tried the generic account for IIS with no luck. I would truly appreciate some help getting this to work. I would also like to thank the authors who created the tags. They are certainly very handy.

Frank Kloskowski

Oh man... to be perfectly honest it`s been so long since I wrote IHT that`ve I`ve simply forgotten the details. I vaguely recall writting a paragraph or two on this in the documentation. But that`s about all the help I can be without doing a lot of research on it myself. (And I have`t had CF installed in months now.)

--min