1. Welcome Guest! In order to create a new topic or reply to an existing one, you must register first. It is easy and free. Click here to sign up now!.
    Dismiss Notice

Process privilege is disabled but it works ?

Discussion in 'Windows Security' started by Vilius Mockûnas, Jun 26, 2009.

  1. Vilius Mockûnas

    Vilius Mockûnas Guest

    Hello,

    Running XP SP3.
    For example I've granted SE_SYSTEMTIME_NAME (SeSystemtimePrivilege) to
    regular user account - now he can alter system time.
    ProcessExplorer shows SeSystemtimePrivilege as disabled - but slill this
    privilege works as expected - why ?

    thanks
    Vilius
     
    Vilius Mockûnas, Jun 26, 2009
    #1
  3. Wilson, Phil

    Wilson, Phil Guest

    The docs say that SetSystemTime enables that privilege. If you're seeing it
    disabled after calling it, then I'd guess that if it needs enabling then it
    enables it, changes the time, then disables it again.

    --
    Phil Wilson
    The Definitive Guide to Windows Installer



    "Vilius Mockûnas" <v_mockunas@yahoo.com> wrote in message
    news:eoSJCRi9JHA.1540@TK2MSFTNGP02.phx.gbl...<!--coloro:blue--><span style="color:blue <!--/coloro-->
    > Hello,
    >
    > Running XP SP3.
    > For example I've granted SE_SYSTEMTIME_NAME (SeSystemtimePrivilege) to
    > regular user account - now he can alter system time.
    > ProcessExplorer shows SeSystemtimePrivilege as disabled - but slill this
    > privilege works as expected - why ?
    >
    > thanks
    > Vilius
    > <!--colorc--><!--/colorc-->
     
    Wilson, Phil, Jul 1, 2009
    #2

Share This Page