Local Security Settings needed to create NT VDM

Archived from groups: microsoft.public.win2000.security (More info?)

Help - Is there a list of the local security settings needed for a local
_or_ domain user account to run a win32 app that spawns off a process that
runs an old 16-bit DOS app? I've tightened down the settings for this app to
what a kiosk-type app would have, and the attempt to create the 16-bit VDM
fails; loggin off and then running this app even as 'guest' allows the
16-bit VDM app to run.

I don't know what settings exactly were changed to create this 'kiosk' type
application (I didn't set them up.)

The app runs on anWin2K Pro station and is part of a Win2K server A.D.
domain.

Thanks -
slc