[LSASRV]
- Just run again the loop if LsarOpenAccount call failed (that also
avoids a call to LsarClose on a NULL handle, that is trapped by the
kdbg if one enabled "set condition * first always").
- Free the memory and the opened handles before returning in case of
failure of LsapAddPrivilegeToTokenPrivileges. Maybe this cleaning step
can be done more elegantly.
Eric, can you please review that? It should be good I think.
The change is OK!