Re: Allow non-Administrator to view and terminate processes for all users



Hi,

Any user in hold of Debug permission (SeDebug Privilege) can easily become
an owner (Administrator) on that PC... User with debug permission can run
tools such as lsadump, pwdump etc...

--
Mike
Microsoft MVP - Windows Security

"S. Pidgorny <MVP>" <slavickp@xxxxxxxxx> wrote in message
news:%23KT4n%23frGHA.3868@xxxxxxxxxxxxxxxxxxxxxxx
Interesting question... That might be a matter of changing one of the user
rights in the local security policy. Which one? I'd say "Increase
scheduling priority" or "debug programs".

--
Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-

"Bruce Sanderson" <bsanders@xxxxxxxxxxxxxxxxx> wrote in message
news:uWfQOCRrGHA.4820@xxxxxxxxxxxxxxxxxxxxxxx
In Windows 2003 Enterprise Server, is there a user right or group policy
setting (or other means) to allow someone to view and end processes from
any (all) users (e.g. in Task Manager - "Show processes from all users")
without making that someone's user account a member of the Administrators
group?

--
Bruce Sanderson MVP
http://members.shaw.ca/bsanders/
It's perfectly useless to know the right answer to the wrong question.







.