diff --git a/winsup/cygwin/ChangeLog b/winsup/cygwin/ChangeLog
index bdfd47175..b48f477c9 100644
--- a/winsup/cygwin/ChangeLog
+++ b/winsup/cygwin/ChangeLog
@@ -1,3 +1,8 @@
+2001-12-30  Corinna Vinschen  <corinna@vinschen.de>
+
+	* security.cc (open_local_policy): Use POLICY_EXECUTE instead of
+	enumerating user rights.
+
 2001-12-29  Corinna Vinschen  <corinna@vinschen.de>
 
 	* security.cc (open_local_policy): Initialize lsa handle to NULL.
diff --git a/winsup/cygwin/security.cc b/winsup/cygwin/security.cc
index 3147c8abe..77ea8fbcc 100644
--- a/winsup/cygwin/security.cc
+++ b/winsup/cygwin/security.cc
@@ -183,8 +183,7 @@ open_local_policy ()
   LSA_OBJECT_ATTRIBUTES oa = { 0, 0, 0, 0, 0, 0 };
   LSA_HANDLE lsa = NULL;
 
-  NTSTATUS ret = LsaOpenPolicy(NULL, &oa, POLICY_VIEW_LOCAL_INFORMATION
-  					  | POLICY_LOOKUP_NAMES, &lsa);
+  NTSTATUS ret = LsaOpenPolicy(NULL, &oa, POLICY_EXECUTE, &lsa);
   if (ret != STATUS_SUCCESS)
     set_errno (LsaNtStatusToWinError (ret));
   return lsa;