Re: Changing process priorities of normal users



"Bert Sierra" <bsierra@xxxxxxxxxxxxxxxxxxx> wrote in message
news:bsierra-CBBDCB.10485118102006@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

Thank you for responding. What I am trying to do is to allow
Administrators the right to adjust normal users process priorities (by
normal users, I mean those who are not Administrators). We noticed that
unless a user was part of the Domain Admins group, Administrators could
not downgrade their process priorities when they were running
CPU-intensive tasks. In other words, an Admin did not have control of
User U's process priorities unless User U was a member of Domain Admins.

It seems that there is something preventing normal users from having
their process priorities changed, even by Administrators, and I'm not
familiar enough with Win2K server administration to know where this
would be set.


OK, it is clear now what you are seeing and what you are wanting to do.
However, I have no idea why you are seeing what you report.
I have not ever noticed a setting that would address what you experience,
at least not one that clearly indicates it would have that effect.

Basically, an admin can change priority of processes running in context
of a Domain Admin account, but not when they run in other contextx.

Why is that?

Roger


.



Relevant Pages

  • Changing process priorities of normal users
    ... We have a Windows 2000 Advanced Server and wish to be able to adjust the ... process priorities of users without adding them to the Domain Admins ... Scheduling Priority" and added Everyone in addition to Administrators to ...
    (microsoft.public.win2000.security)
  • RE: WINNT security priviledge escalation attack
    ... Administrators, while normal users have only read and execute access. ... Similarly, on a Win2K server I just checked out, Server Operators and ... WINNT security priviledge escalation attack ...
    (Focus-Microsoft)
  • Re: removing shutdown command
    ... But chances are, if normal users are Administrators, they will be ... able to change the policy back again. ... There is *no* defence against Administrators. ... > Settings, Security Settings, Local Policies, and User Rights ...
    (microsoft.public.win2000.termserv.clients)
  • SUS Silent Install for Administrators
    ... Is there any way of getting the patches installed via SUS ... Pete. ...
    (microsoft.public.security)
  • Re: Remove Administrators from Ownership Tab
    ... normal users are *not* nortmally granted administrative privileges; doing so completely undermines the whole point of domain security. ... Are you refering to the Domain Administrator, as opposed to local workstation Administrators? ... They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety. ...
    (microsoft.public.windowsxp.security_admin)