Unfortunately, the documentation says that any process using LoginAsUser nees "act as part of the operating system" (SeTcbPrivilege). I'm not sure it is wise to grant that priv to all users.

--traveler