Re: Privilege config. problem

From: Alexander Müller (pc_alex_at_usa.net)
Date: 10/20/03 

Date: Mon, 20 Oct 2003 15:03:52 +0200

Hi Rhett,

> I suggest you using LsaEnumerateAccountsWithUserRight to see whether the
> "SeTcbName" privilege was granted. If success, it means the privilege has
> been granted. If not, there may be some problem in configuring your
> privilege.

The true name is "SeTcbPrivilege", the "SeTcbName" is unknown ...

When calling LsaEnumerateAccountsWithUserRight(..., L"SeTcbPrivilege", ...),
I am given "Domain-Administrators" and "Administrator". I am member of
"Domain-Administrators", but still the privilege is not listed when calling
"LsaEnumerateAccountRights()" with my account's SID.

When calling "LsaOpenPolicy()" and "GetAccountSid()", I use the name of my
machine, the Win2000 PDC, as the first parameter. My account is a domain's
account. When I use "NULL" instead, theres no difference, still only
"SeBatchLogonRight".

Perhaps I have to call "LsaEnumerateAccountRights()" recursively with all
the groups SIDs I'm a member of ???

Alex

Relevant Pages

  • Re: "Access Denied" message when adding member server in existing
    ... Are you sure you're performing dcpromo with a privileged account and not ... that's member of the domain admins group? ... I havent tried any other account by assigining domain admin privilege. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Females are out of UHJ!
    ... nature are not designed to bear children. ... It is a "privilege" reserved ... powers and women have certain capabilities and maternal instincts. ... that matters and in the same vein being a member of the Universal House ...
    (soc.religion.bahai)
  • Re: Growing up gifted
    ... Privilege is the condition of being part of a group that is usually ... Yes for the purposes of how being a member of that group is likely to ... and the culture of the people who have all the resources. ... "unprivileged people") have no responsibility to improve their limited ...
    (soc.singles.moderated)
  • Re: Administrator Equivalent Creation
    ... Domain Admins group added to local Administrators group. ... >I created a user in Active Directory Users and Computers and made that user>a> member of the same groups that Administrator is a member of. ... > of lack of privilege. ... > user could change the computer clock. ...
    (microsoft.public.windows.server.active_directory)
  • Re: All you guys bashing Jessica Simpson
    ... example of female beauty on the planet and every member of the ... species should smile at the privilege of being part of the human ...
    (rec.sport.football.college)
Quantcast