If you open up advapi32.dll using a resource editor and view the string tables, there should be an entry like this: STRINGTABLE LANGUAGE LANG_ENGLISH, SUBLANG_ENGLISH_US { 50001, "Disallowed" 50002, "Software will not run, regardless of the access rights of the user." 50003, "Untrusted" 50004, "Allows programs to execute with only access to resources granted to open well-known groups, blocking access Administrator and Power User privileges, and personally granted rights." 50005, "Restricted" 50006, "Software cannot access certain resources, such as cryptographic keys and credentials, regardless of the access rights of the user." 50007, "Basic User" 50008, "Allows programs to execute as a user that does not have Administrator or Power User access rights, but can still access resouces accessible by normal users." 50009, "Unrestricted" 50010, "Software access rights are determined by the access rights of the user." } Just curious what's it for and how to use it if anyone knows. Seems to me like it's some sort of user rights thing. If it is, then maybe Minlogon can support running programs with lower rights?