Problem with Process-to-process Security ...

Simply put, I have a process (normally a service running in an account with Administrative rights) that is given a Pipe Handle from its client processes (running on other accounts) using a RPC/COM function call. The Pipe Handle is created with CreatePipe in the client process. The client process therefore have to DuplicateHandle the handle that is given to the server process. In order to do so, the server process have to grant "EVERYONE" (?) the following access rights to its own process: PROCESS_QUERY_INFORMATION, PROCESS_DUP_HANDLE, and SYNCHRONIZE.

However, I have failed to do that using the code that follows:

   // Give other processes right to duplicate handles for this application.

   HANDLE hProcess = ::OpenProcess(PROCESS_ALL_ACCESS, FALSE, ::GetCurrentProcessId());

   if (NULL != hProcess)
   {
      HANDLE hProcessToken = NULL;
      if (::OpenProcessToken(::GetCurrentProcess(), TOKEN_READ | TOKEN_ADJUST_PRIVILEGES, &hProcessToken))
      {
         if (::SetPrivilege(hProcessToken, SE_SECURITY_NAME, TRUE))
         {
            PACL pOldDacl = NULL;
            PSECURITY_DESCRIPTOR pSecurityDescriptor = NULL;
            DWORD dwErrorCode = ::GetSecurityInfo(hProcess, SE_KERNEL_OBJECT, DACL_SECURITY_INFORMATION, NULL, NULL, &pOldDacl, NULL, &pSecurityDescriptor);
            if (ERROR_SUCCESS == dwErrorCode)
            {
               EXPLICIT_ACCESS rgExplicitAccess[1] = { 0 };

               ::BuildExplicitAccessWithName(rgExplicitAccess, _T("EVERYONE"), PROCESS_QUERY_INFORMATION | PROCESS_DUP_HANDLE | SYNCHRONIZE, GRANT_ACCESS, NO_INHERITANCE);

               PACL pNewDacl = NULL;
               dwErrorCode = ::SetEntriesInAcl(sizeof(rgExplicitAccess)/sizeof(rgExplicitAccess[0]), rgExplicitAccess, pOldDacl, &pNewDacl);

               if (ERROR_SUCCESS == dwErrorCode) // 1332 : ERROR_NONE_MAPPED : "No mapping between account names and security IDs was done."
               {
                  dwErrorCode = ::SetSecurityInfo(hProcess, SE_KERNEL_OBJECT, DACL_SECURITY_INFORMATION, NULL, NULL, pNewDacl, NULL);

                  if (ERROR_SUCCESS == dwErrorCode)
                  {
                     HLOCAL hLocal = ::LocalHandle(pNewDacl);

                     if (NULL != hLocal)
                     {
                        hLocal = ::LocalFree(hLocal);
                     }
                  }
               }

               HLOCAL hLocal = ::LocalHandle(pSecurityDescriptor);

               if (NULL != hLocal)
               {
                  hLocal = ::LocalFree(hLocal);
               }
            }
         }

         ::CloseHandle(hProcessToken);
         hProcessToken = NULL;
      }

      ::CloseHandle(hProcess);
      hProcess = NULL;
   }

SetPrivilege is a function that sets or resets a privilege for a process token (I don't know if its necessary).

As indicated, it is the function SetEntriesInAcl that fails with error code ERROR_NONE_MAPPED.

How can I accomplish the task of duplicating the Pipe Handle for the server process ?