O
outerspace9
Can the user rights/privileges granted to "Local System" and "NT Authority\System" be modified?
I did a quick test:
1. Started a cmd.exe using "at" command
2. Ran "whoami /all" to get its privileges
3. Started gpedit.msc and granted "Take ownership of files or other objects" to "System" accnt
4. Restarted PC
5. Started cmd.exe using "at" command
6. Ran "whoami /all" to get its privileges
7. Compared the 2 results and it seems like the "System" account still does not have "Take ownership of files or other objects" privilege
Am I not using the right tool to accomplish the task or are the privileges for these 2 accounts implicitly defined and cannot be changed?
And one more question: are there any command line tools available to check other user's privileges? Basically a tool like whoami.exe but that checks other users instead of the currently logged on user.
Thanks!
Continue reading...
I did a quick test:
1. Started a cmd.exe using "at" command
2. Ran "whoami /all" to get its privileges
3. Started gpedit.msc and granted "Take ownership of files or other objects" to "System" accnt
4. Restarted PC
5. Started cmd.exe using "at" command
6. Ran "whoami /all" to get its privileges
7. Compared the 2 results and it seems like the "System" account still does not have "Take ownership of files or other objects" privilege
Am I not using the right tool to accomplish the task or are the privileges for these 2 accounts implicitly defined and cannot be changed?
And one more question: are there any command line tools available to check other user's privileges? Basically a tool like whoami.exe but that checks other users instead of the currently logged on user.
Thanks!
Continue reading...
