title: how to check Local Security Policy rights as non-admin
body: <p>Situation is a client system running c# code, that upon starting we wish to check and confirm that the windows identity running the system has certain specific privileges, current specific case is SeSystemtimePrivilege. 
  We do not want the user to be required to be an admin for the system to start.</p>
  
  <p>Paths attempted so far include:</p>
  
  <ul>
  <li><p>WMI which did not get the set of rights we were after.</p></li>
  <li><p>LsaEnumerateAccountsWithUserRight through PInvoke - which totally works, but requires admin rights to use LsaOpenPolicy. </p></li>
  <li>GetTokenInformation through PInvoke, in conjunction with LookupPrivilegeName This did not return the desired results. Instead it returned just 5 privileges for the token, but did not include SeSystemtimePrivilege although it had been explicitly granted to the user in question. ( I am thinking it is showing me only rights from GP ? They are the same rights I see with a cmd WhoAmI /priv check.)</li>
  <li>LookupPrivilegeValue through PInvoke, in conjunction with PrivilegeCheck, and this also only seems to have access to the same 5 rights as GetTokenInformation, and only returns true when said right is actually enabled.</li>
  </ul>
  
  <p>I cannot figure out so far how to enable this right on my local machine to test that situation, but I don't think I can rely on it being other than default on client machines. </p>
  
  <p>I am looking for more ideas of how to get at these user rights without having to have admin rights.</p>
  
  <p>Ideas? Have I exhausted the options? That can't be so, can it?</p>