Posted March 10, 201212 yr Can the user rights/privileges granted to "Local System" and "NT Authority\System" be modified? I did a quick test: 1. Started a cmd.exe using "at" command 2. Ran "whoami /all" to get its privileges 3. Started gpedit.msc and granted "Take ownership of files or other objects" to "System" accnt 4. Restarted PC 5. Started cmd.exe using "at" command 6. Ran "whoami /all" to get its privileges 7. Compared the 2 results and it seems like the "System" account still does not have "Take ownership of files or other objects" privilege Am I not using the right tool to accomplish the task or are the privileges for these 2 accounts implicitly defined and cannot be changed? And one more question: are there any command line tools available to check other user's privileges? Basically a tool like whoami.exe but that checks other users instead of the currently logged on user. Thanks! Continue reading...
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.