Re: Account "Support"

From: Eric Fitzgerald [MS] (ericf@online.microsoft.com)
Date: 11/09/02 

From: "Eric Fitzgerald [MS]" <ericf@online.microsoft.com>
Date: Fri, 8 Nov 2002 18:08:54 -0800

I think it's defined somewhere under here, but I don't know how well
documented it is:
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/pchealth/pchealth/pchhelpcenterexternal.asp

Eric

"Bill Sanderson" <Bill_Sanderson@msn.com.plugh.org> wrote in message
news:eU7olx3hCHA.2364@tkmsftngp08...
> Are there parameters which might define such an account? It should be in
XP
> or .NET only, probably have a name similar to the standard Microsoft one
> (Support followed by.. (hmm - I seem to have lost mine!)) and a very
limited
> permission and group membership, as I recall.
>
> At any rate, such features as administrator permission or being the sole
> account with network access would probably be tip-offs to an imposter.
>
> "Eric Fitzgerald [MS]" <ericf@online.microsoft.com> wrote in message
> news:3dcc3b32$1@news.microsoft.com...
> > This should only be present on Windows XP and Windows .NET Server, and
> > should NOT be a member of the administrator group. This may be a hack,
> > but
> > it might also be OEM software using our Help and Support Framework,
which
> > would create another account.
> >
> > Eric
> >
> > "Charles Otstot" <saries@nc.rr.com> wrote in message
> > news:ed9hTQyhCHA.3736@tkmsftngp08...
> > > Eric,
> > >
> > > For which products is this account valid? Is it visible in User
Manager
> > (NT)
> > > or MMC (2K)? Is it Support or
> > > Support_388945a0? I really think that in Franz' case...particularly
> > > given
> > > the ACL issues he's noted...this is a hack and *not* a normal account.
> > > It
> > > certainly is not present in any installation I've seen as an account
> > > with
> > > normal attributes in either NT or 2000 (the platforms for which it's
> > > description is indicating validity).
> > >
> > > Apologies if this seems inappropriate, but if I'm inaccurate, please
> > > point
> > > me to the appropriate documentation. I'd really like to find out more.
> > >
> > > Charlie
> > >
> > >
> > >
> > > "Eric Fitzgerald [MS]" <ericf@online.microsoft.com> wrote in message
> > > news:3dcac6b1$1@news.microsoft.com...
> > > > Franz,
> > > >
> > > > SUPPORT_388945a0 is a built-in account and is not dangerous. It is
> > > disabled
> > > > by default and can safely be disabled (or even deleted, it will be
> > > recreated
> > > > if necessary). It should belong to the HelpServicesGroup and to no
> > other
> > > > groups.
> > > >
> > > > If you have installed software or your machine included
pre-installed
> > > > software (most likely from your computer manufacturer) that
integrates
> > > with
> > > > our Help and Support framework, then you may see another user
account
> > with
> > > a
> > > > similar name. You should contact your computer manufacturer to see
> > > > what
> > > the
> > > > account is used for, if it needs to be an administrator, etc.
> > > >
> > > > Eric
> > > >
> > > > "Franz Staffel" <fstaffel@dke.univie.ac.at> wrote in message
> > > > news:3dc7bcaf$0$8796$3b214f66@news.univie.ac.at...
> > > > > Hello,
> > > > >
> > > > > is there anybody, who knows the account "Support" member of
> > > > "administrators"
> > > > > with the description "Built-in account for providing help
services"
> > > > > in
> > > > > windows nt/2k?
> > > > >
> > > > > I donīt find very much about this. I think it is used by a
backdoor
> > > > > or
> > > > > trojan horse.
> > > > >
> > > > > LG
> > > > > Franz
> > > > >
> > > > >
> > > > >
> > > >
> > > >
> > >
> > >
> >
> >
>

Quantcast