Re: Local System Account

Mike:

This is great information. I also do not want to run applications as
LocalSystem (this is last resort).

"Miha Pihler [MVP]" wrote:

Hi,

Sure -- it is called interactive mode.

First logon to the server (you have to go to console -- this will not work
e.g. over RDP). Now that you are logged on to the server as administrator,
run following command from command line:

at 17:57 /i cmd.exe

where 17:57 is at least one minute more then current time. Now wait for
cmd.exe to start (in e.g. 1 minute). This cmd.exe that executes now runs as
"Local System". You can check this in e.g. Task Manager. If you open Task
Manager and look for cmd.exe you will see that it runs under Local System...
(note: if you have more then one cmd.exe running at the same time chance is
that one will run under your account).
Any exe file or application that you now run from cmd.exe running under
Local System will also run as Local System.

Again -- I would like to stress that this is not a common way to run exe
files or applications... I never had to do this in production environment.
It could cause some problems with your application if it works over the
network.

I hope this helps,

--
Mike
Microsoft MVP - Windows Security

"Prem Mehrotra" <PremMehrotra@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:CC2D9919-38C3-4DC8-8DFF-9CC91148D44D@xxxxxxxxxxxxxxxx
Mike:

I really appreciate your quick reponse. I see whne some Windows service is
run, one can specify it to run as localsystem account. Is there a way to
run
some .exe (which is not a service) using localsystem account.

Prem

"Miha Pihler [MVP]" wrote:

Hi,

No, administrator is not same as Local System.

--
Mike
Microsoft MVP - Windows Security

"Prem Mehrotra" <PremMehrotra@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:AA2F8252-2AA3-471F-BF3B-877D2BE93488@xxxxxxxxxxxxxxxx
Actaully, I do exactly what you are recommending, but somehow in this
case,
Oracle does not seem to honor group (administrators ) privileges. It
appeatrs that user id is embedded in some Oracle key, as a result only
the
user who ran he command to generate the key can run the application.
Since application runs as "Local System Account", I want to run key
generation commands from Local System Command.

Sorry for repeating the question. To clarify:
1. If I logged on as Adminstrator account, is it same thing as
LocalSystem.

Thanks a lot,

Prem

"Miha Pihler [MVP]" wrote:

Hi,

It is _not_ common to run commands or tasks as Local System.
Personally I
never had to use Local System except for demonstration purposes.

Account that you would use to run commands and tools depends on task
that
you would like to perform. If the tool requires administrative
permissions
for some reason then you can either use Administrator account or any
other
account that is member of Administrators Group on that computer (e.g.
in
your case pmehrotr). If this account is member of Administrators group
is
has same permissions as built-in Administrator account.

Note: don't use account that is member of administrator group for
everyday
work. It can be quite dangerous. E.g. if you surf the web or read
infected
e-mail with such account you can quickly infect the computer with a
virus...
Personally I have two accounts. E.g. account "mike" for everyday's
work
and
"admin-mike" for administrative work. With second account I e.g. don't
surf
the web and I don't read e-mail with it. If I am logged on to the
computer
as mike (usually I am) I use tools such as runas (command line tool)
to
run
a specific program with higher permissions.

--
Mike
Microsoft MVP - Windows Security

"Prem Mehrotra" <PremMehrotra@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message
news:91CADB3B-C691-4512-86CA-BD9B5CEDE0EA@xxxxxxxxxxxxxxxx
I am a novice to Windows administration. On Windows 2000, several
services
run as local system account. If I were to run some commands manually
as
system, how do that. Do I logon as Administrator login locally on
the
server
and then execute my commands, or there is something else to be done.

I am an account on the server (pmehrotr) which is in Administrators
group,
but I do not have access to Administrator account per se. Is there
any
way
I
can run something as local system account by logging on as my login.
When
I
run something as pmehrotr, I know it is not run as local system
account.

Thanks a lot.

Prem










.

Relevant Pages

  • Re: Local System Account
    ... I checked on Windows Server 2003 and Vista Beta 2. ... run following command from command line: ... one can specify it to run as localsystem account. ... administrator is not same as Local System. ...
    (microsoft.public.win2000.security)
  • Re: Lost Administrators password
    ... > administrator password enter, reboot. ... This command changed the Password from ... > account which he forgot the password. ... > Admin account. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Local System Account
    ... administrator is not same as Local System. ... Since application runs as "Local System Account", ... It is _not_ common to run commands or tasks as Local System. ...
    (microsoft.public.win2000.security)
  • Re: Administrator access denied
    ... When you run the command net user username where username is the logon name ... for your user account it show the account is active. ... Home you can only logon to the built in administrator account in Safe Mode. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Admin user account locked out - need help!
    ... the credentials for a local administrator account then that will not help ... administrator of the locked out computer. ... I tried the psexec approach but was unable to open the command ...
    (microsoft.public.windowsxp.security_admin)