' Change the service account name
    If ChangeServiceConfig(schService, SERVICE_NO_CHANGE, SERVICE_NO_CHANGE, SERVICE_NO_CHANGE, _
     , , , , ServiceStartName, Password, ) = False Then

ntrights.exe -u D\Dmitry +r SeServiceLogonRight
 Granting SeServiceLogonRight to D\Dmitry   ... successful

ntrights.exe -u D\Dmitry -r SeServiceLogonRight
 Revoking SeServiceLogonRight from D\Dmitry   ... successful

  Private Sub Form1_Load(sender As Object, e As EventArgs) Handles Me.Load
    Me.TextBoxUserName.Text = System.Security.Principal.WindowsIdentity.GetCurrent().Name
  End Sub

  Private Sub ButtonAddPrivilege_Click(sender As Object, e As EventArgs) Handles ButtonAddPrivilege.Click
    Dim err_text As String = ""
    If SetUserRight(err_text, Me.TextBoxUserName.Text, "SeServiceLogonRight", True) = False Then
      MsgBox(err_text)
    Else
      MsgBox("OK")
    End If
  End Sub

  Private Sub ButtonRemovePrivilege_Click(sender As Object, e As EventArgs) Handles ButtonRemovePrivilege.Click
    Dim err_text As String = ""
    If SetUserRight(err_text, Me.TextBoxUserName.Text, "SeServiceLogonRight", False) = False Then
      MsgBox(err_text)
    Else
      MsgBox("OK")
    End If
  End Sub

 Public Function SetUserRight(ByRef err_text As String, _
   ByVal accountName As String, ByVal privilegeName As String, _
   Optional ByVal bEnable As Boolean = True) As Boolean
    SetUserRight = True

    Dim dwRes As Integer
    Dim p_abytSIDTarget() As Byte 'вместо pSIDTarget
    Dim pSIDTarget As IntPtr
    Dim dwSIDTarget As Integer 'size of the Sid buffer
    Dim DomainName As String = "" 'domain name на выходе
    Dim dwDomainName As Integer 'size of domain name buffer
    Dim eUse As Integer 'SID type
    Dim bRtnBool As Boolean
    Dim pPrivilegeName As IntPtr

    'Create a SID for specified account
    'Preinitialize p_abytSIDAdmin array with one element. It will be redimmed lated
    ReDim p_abytSIDTarget(1)
    'First call to LookupAccountName to get the buffer sizes.
    bRtnBool = LookupAccountName(vbNullString, accountName, p_abytSIDTarget, dwSIDTarget, _
     DomainName, dwDomainName, eUse)
    If (bRtnBool = False) And (Err.LastDllError <> ERROR_INSUFFICIENT_BUFFER) Then
      SetUserRight = False
      err_text = "LookupAccountName Error " & RaiseAPIError()
      GoTo ToExit
    End If
    'Debug.Print("dwSIDTarget=" & dwSIDTarget & vbCrLf & "dwDomainName=" & dwDomainName)

    'Allocate the required space in the p_abytSIDAdmin and DomainName string
    'variables. Allocate 1 byte less to avoid the appended NULL character.
    ReDim p_abytSIDTarget(dwSIDTarget)
    DomainName = Space(dwDomainName - 1)

    'Second call to LookupAccountName to get p_abytSIDAdmin.
    If LookupAccountName(vbNullString, accountName, p_abytSIDTarget, dwSIDTarget, _
     DomainName, dwDomainName, eUse) = False Then
      SetUserRight = False
      err_text = "LookupAccountName Error " & RaiseAPIError()
      GoTo ToExit
    End If
    'Debug.Print(DomainName)

    pSIDTarget = Marshal.AllocHGlobal(dwSIDTarget)
    Marshal.Copy(p_abytSIDTarget, 0, pSIDTarget, dwSIDTarget)

    Dim PolicyHandle As IntPtr
    'initialize an empty unicode-string
    Dim SystemName As New LSA_UNICODE_STRING
    'these attributes are not used, but LsaOpenPolicy wants them to exists
    Dim ObjectAttributes As New LSA_OBJECT_ATTRIBUTES
    With ObjectAttributes
      .Length = 0
      .RootDirectory = IntPtr.Zero
      .Attributes = 0
      .SecurityDescriptor = IntPtr.Zero
      .SecurityQualityOfService = IntPtr.Zero
    End With

    'Attempt to open the policy
    dwRes = LsaOpenPolicy(SystemName, ObjectAttributes, POLICY_CREATE_ACCOUNT Or POLICY_LOOKUP_NAMES, PolicyHandle)
    If dwRes <> STATUS_SUCCESS Then
      SetUserRight = False
      err_text = "LsaOpenPolicy Error " & RaiseAPIErrorByNumber(LsaNtStatusToWinError(dwRes))
      GoTo ToExit
    End If

    'initialize an unicode-string for the privilege name
    Dim userRights As LSA_UNICODE_STRING = New LSA_UNICODE_STRING
    pPrivilegeName = Marshal.StringToHGlobalUni(privilegeName)
    userRights.Buffer = pPrivilegeName
    userRights.Length = CType(Strings.Len(privilegeName) * System.Text.UnicodeEncoding.CharSize, UShort)
    userRights.MaximumLength = CType((Strings.Len(privilegeName) + 1) * System.Text.UnicodeEncoding.CharSize, UShort)
    If bEnable Then
      dwRes = LsaAddAccountRights(PolicyHandle, pSIDTarget, userRights, 1)
      If dwRes <> STATUS_SUCCESS Then
        SetUserRight = False
        err_text = "LsaAddAccountRights Error " & RaiseAPIErrorByNumber(LsaNtStatusToWinError(dwRes))
        GoTo ToExit
      End If
    Else
      dwRes = LsaRemoveAccountRights(PolicyHandle, pSIDTarget, False, userRights, 1)
      If dwRes <> STATUS_SUCCESS Then
        SetUserRight = False
        err_text = "LsaRemoveAccountRights Error " & RaiseAPIErrorByNumber(LsaNtStatusToWinError(dwRes))
        GoTo ToExit
      End If
    End If

ToExit:
    If Not pSIDTarget.Equals(0) Then
      Marshal.FreeHGlobal(pSIDTarget)
    End If

    If Not pPrivilegeName.Equals(0) Then
      Marshal.FreeHGlobal(pPrivilegeName)
    End If

    If PolicyHandle <> IntPtr.Zero Then LsaClose(PolicyHandle)

  End Function