This is the mail archive of the
cygwin-developers@cygwin.com
mailing list for the Cygwin project.
Re: Windows server 2003
Corinna Vinschen wrote:
>
> On Wed, Apr 09, 2003 at 10:38:01AM -0400, Pierre A. Humblet wrote:
> > > I don't think any of these accounts are actually member of any group.
> > > It's just the way access tokens are created so it looks like SYSTEM
> > > is member of admins. I didn't look into an access token of a process
> > > under any of the other well-known SIDs, though.
> >
> > I just looked up MSDN. It says their privileges include those of Users
> > and Authenticated Users, which most probably means they are in those groups.
>
> Probably. I've just searched MSDN for that info but didn't find it. I
> found only a hint that the service processes only have a few privileges
> and are not member of the local admins group.
>
> Could you give me a pointer?
Sure. Last line in
<http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dllproc/base/localservice_account.asp>
<http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dllproc/base/networkservice_account.asp>
It looks like the only diff between them is how they act on the
network (anonymous vs. local computer).
Pierre