   Job Objects again and again
  I think I've hit the wall, there are no more API functions that I havn't tried and nothing seems to work so far.The task is darn simple - I launch an application from user (foo acount) it starts bunch of applications with lowered privilegies (bar acount) and when application is said to close, it kills everything it has started, including child and grandchild processes.GOOGLE+MSDN gave a pretty simple answer JobObjects. You make one, assign processes to it and when app is closing call TerminateJobObject. Clean and smooth.Well that's what docs say... The real world app is behaving a little differently...I can create and terminate job object just fine, but nothing on earth allows me to add a process to existing job object. It all ends with Access denied in last error.I tired impersonation, createprocesswithlogonw, createprocesswithtoken, PSID's, DACLS/ACES, creating job object while impersonating bar account - nothing!I'm starting to have a feeling that the approach I want to implement is impossible, at least while I dont make every darn user including 'guest' working as a part of operating system.Does anyone ever heard something that might help me?! Please!   