Click here to get back home

No Explicit Reference to SYSTEM in User Rights?
 Home | NewsGroups | Search | About
Login Password
Register Now!
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
No Explicit Reference to SYSTEM in User Rights? Will 07-02-2006
Posted by Will on July 2, 2006, 9:47 pm
Please log in for more thread options
 I'm noticing in the User Rights in a default install of Windows XP that
there are no explicit references to SYSTEM, even when SYSTEM really does
have a user right. Is this because the OS is given these rights no matter
whether you want them to have them or not? I suppose there is no harm in
explicitly adding in SYSTEM on these user rights, just as a form of
documentation?

--
Will



Posted by Roger Abell [MVP] on July 2, 2006, 11:41 pm
Please log in for more thread options
 System always gets Administrators in its user token, so any grant
to Administrators is a grant to System.

> I'm noticing in the User Rights in a default install of Windows XP that
> there are no explicit references to SYSTEM, even when SYSTEM really does
> have a user right. Is this because the OS is given these rights no
> matter
> whether you want them to have them or not? I suppose there is no harm
> in
> explicitly adding in SYSTEM on these user rights, just as a form of
> documentation?
>
> --
> Will
>
>



Posted by Roger Abell [MVP] on July 5, 2006, 1:50 am
Please log in for more thread options
PS. There are explicit grants to System however, but easy to not notice.
Look for example at NTFS grants on System Volume Information, or
registry at HKLM\Security.

> I'm noticing in the User Rights in a default install of Windows XP that
> there are no explicit references to SYSTEM, even when SYSTEM really does
> have a user right. Is this because the OS is given these rights no
> matter
> whether you want them to have them or not? I suppose there is no harm
> in
> explicitly adding in SYSTEM on these user rights, just as a form of
> documentation?
>
> --
> Will
>
>



Posted by Will on July 5, 2006, 4:41 am
Please log in for more thread options
Right, I do see the grants on file system objects. That's what made it all
the more strange that they would have any grants to SYSTEM be implicit on
User Rights.

--
Will

> PS. There are explicit grants to System however, but easy to not notice.
> Look for example at NTFS grants on System Volume Information, or
> registry at HKLM\Security.



Posted by Roger Abell [MVP] on July 5, 2006, 11:25 am
Please log in for more thread options

> Right, I do see the grants on file system objects. That's what made it
> all
> the more strange that they would have any grants to SYSTEM be implicit on
> User Rights.
>

I think we are playing language tag again, as I don't understand "any grants
to
System be implicit on User Rights". System is a (hidden) member of
Adminsitrators,
that is all (note: this is not user rights). So, where System but not
Administrators
has need for a grant, then you will see it granted. Apparently, over time
people
have come to not know of this however and so you will find many using side
by
side identical grants to System and to Administrators.


>
>> PS. There are explicit grants to System however, but easy to not notice.
>> Look for example at NTFS grants on System Volume Information, or
>> registry at HKLM\Security.
>
>



Similar ThreadsPosted
How2: User Rights on Domain but Admin Rights on Computer December 20, 2006, 3:40 pm
system log user March 7, 2006, 2:45 am
user rights August 15, 2005, 10:13 am
User Rights not enough? October 4, 2006, 3:47 am
effective user rights January 5, 2006, 5:50 pm
Discovering User Rights November 13, 2007, 12:15 pm
User Account and Rights questions January 28, 2006, 10:03 am
User Rights for IUSR_xxxx and ASPNET? December 26, 2006, 1:05 am
OpenRowset : DSN : file-system permissions : Local System March 14, 2008, 10:23 am
Need limited domain admin rights user account. August 8, 2005, 2:33 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap