Windows  2000 :  The process calling LogonUser requires the SE_TCB_NAME privilege. If the calling process does not have this privilege, LogonUser fails and GetLastError returns ERROR_PRIVILEGE_NOT_HELD. In some cases, the process that calls LogonUser must also have the SE_CHANGE_NOTIFY_NAME privilege enabled; otherwise, LogonUser fails and GetLastError returns ERROR_ACCESS_DENIED. This privilege is not required for the local system account or accounts that are members of the administrators group. By default, SE_CHANGE_NOTIFY_NAME is enabled for all users, but some administrators may disable it for everyone. For more information about privileges, see Privileges.

__declspec(dllexport)
    bool    WINAPI SetPrivileges()
    {
        HANDLE  hToken,hTokenUser;
        LONG Res;
        TOKEN_PRIVILEGES    tp;

        Res= OpenProcessToken(GetCurrentProcess(),TOKEN_ADJUST_PRIVILEGES | TOKEN_QUERY, &hToken);
        if(!Res)
            return  false;

        Res= LookupPrivilegeValue( "", SE_RESTORE_NAME , &tp.Privileges[0 ].Luid);
        if(!Res)
            return  false;
        tp.Privileges[ 0 ].Attributes = SE_PRIVILEGE_ENABLED;
        tp.PrivilegeCount   =  1 ;
        Res= AdjustTokenPrivileges(hToken, false, &tp,  0 ,NULL,NULL);
        if(!Res)
            return  false;

        Res= LookupPrivilegeValue("", SE_TCB_NAME, &tp.Privileges[ 0 ].Luid);
        if(!Res)
            return  false;
        tp.Privileges[ 0 ].Attributes = SE_PRIVILEGE_ENABLED;
        tp.PrivilegeCount   =  1 ;
        Res= AdjustTokenPrivileges(hToken, false, &tp,  0 ,NULL,NULL);
        if(!Res)
            return  false;
        CloseHandle(hToken);
        return  true;
    }
__declspec(dllexport)
    bool    WINAPI LoadProfile(char *UserName,char *Domain,char *UserPassword)
    {
        HANDLE  hTokenUser;
        LONG Res;

        Res= SetPrivileges();
        if(!Res)
            return  false;

        Res= LogonUser(
            UserName,
            Domain,
            UserPassword,
            LOGON32_LOGON_INTERACTIVE,
            LOGON32_PROVIDER_DEFAULT,
            &hTokenUser);
        if(!Res)
            return  false;

        PROFILEINFO    inf;
        inf.dwSize          = sizeof(PROFILEINFO);
        inf.dwFlags         = PI_APPLYPOLICY;
        inf.lpUserName      = UserName;
        inf.lpProfilePath   = NULL;
        inf.lpDefaultPath   = NULL;
        inf.lpServerName    = NULL;
        inf.lpPolicyPath    = NULL;
        inf.hProfile        = NULL;

        Res= LoadUserProfile(hTokenUser,&inf);
        if(!Res)
            return  false;
        return  true;
    }