RE: suid under Win2K?

From: Andrew McClymont (andrewmcclymont@d-link.net)
Date: 03/08/02 

From: "Andrew McClymont" <andrewmcclymont@d-link.net>
To: "'Hendry'" <bsdkernel2000@yahoo.com>, <focus-ms@securityfocus.com>
Date: Fri, 8 Mar 2002 14:06:02 -0300

Under Win2000 you have the runAs service/feature... But before doing
this you rather check why does this game need so many access priviliges?
Probably it's just a matter of setting the right access rights to the
right folders.

Hope it helps,
-andy

-----Original Message-----
From: Hendry [mailto:bsdkernel2000@yahoo.com]
Sent: Friday, March 08, 2002 10:11 AM
To: focus-ms@securityfocus.com
Subject: suid under Win2K?

greeting,

sorry if this question is off-topic...

I have been asked for help by a friend who run a computer rental
business. Basically, he provide (some) computer games under Win2K, and
these game need an administrator priviledge to run properly.

However, he prefer not to give an administrator account for his
customer, so I try to find a way to do it.

Being from unix background, I know that unix has setuid bit that could
be used to solve this kind of problem (yes, I know setuid is EVIL =P but
hey, it is available)...

what is the solution for Win2K? I would like to give the least
priviledge for the user, but also make it possible for them to run the
games (which somehow need power user/administrator priviledge to run).

Also, is there a way to make a program unkillable (or invisible from
task manager so average user can't "end process" it?)

thanks for any help,

Hendry

Loading