From 83277ebd13733bbfeadc121c04d76c61048877db Mon Sep 17 00:00:00 2001
From: Eric Kohl <eric.kohl@reactos.org>
Date: Wed, 19 Sep 2012 12:59:47 +0000
Subject: [PATCH] [SAMSRV/SYSSETUP] Use proper access rights in calls to
 LsaOpenPolicy.

svn path=/trunk/; revision=57338
---
 reactos/dll/win32/samsrv/setup.c      | 2 +-
 reactos/dll/win32/syssetup/security.c | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/reactos/dll/win32/samsrv/setup.c b/reactos/dll/win32/samsrv/setup.c
index c3438bc24b6..fed27722434 100644
--- a/reactos/dll/win32/samsrv/setup.c
+++ b/reactos/dll/win32/samsrv/setup.c
@@ -471,7 +471,7 @@ SampGetAccountDomainInfo(PPOLICY_ACCOUNT_DOMAIN_INFO *AccountDomainInfo)
 
     Status = LsaOpenPolicy(NULL,
                            &ObjectAttributes,
-                           POLICY_TRUST_ADMIN,
+                           POLICY_VIEW_LOCAL_INFORMATION,
                            &PolicyHandle);
     if (Status != STATUS_SUCCESS)
     {
diff --git a/reactos/dll/win32/syssetup/security.c b/reactos/dll/win32/syssetup/security.c
index f958d2efdb7..9df76692850 100644
--- a/reactos/dll/win32/syssetup/security.c
+++ b/reactos/dll/win32/syssetup/security.c
@@ -38,7 +38,7 @@ SetAccountDomain(LPCWSTR DomainName,
 
     Status = LsaOpenPolicy(NULL,
                            &ObjectAttributes,
-                           POLICY_TRUST_ADMIN,
+                           POLICY_VIEW_LOCAL_INFORMATION | POLICY_TRUST_ADMIN,
                            &PolicyHandle);
     if (Status != STATUS_SUCCESS)
     {