Re: How to raise rights...

Christian Kaiser wrote:
> I cannot use the SSPI login that you suggest, as LOGON_NETWORK does
> not give me the right to write into HKEY_LOCAL_MACHINE (at least my
> test say so). Especially when I start an OLE server to register
> itself ("app.exe /register"), I need LOGON_INTERACTIVE, I guess.

Logon type has (almost) nothing to do with rights. Unless somebody
specifically denied access to "Network" in a DACL there shouldn't be any
difference. The simplest check is to use regedit remotely ("Connect network
registry"). If it allows you to change relevant keys the netwrok logon on a
local box should be as good.
Most likely you had some other kind of problem.

> OK, let me rewrite my question :))) If the admin token is the current
> token of a thread, and CreateProcess is called in that thread, may I
> assume the new process inherits that token?

Yes. That's how all these runas, cmdasuser etc. work.

--
Eugene
http://www.gershnik.com




.

Relevant Pages

  • Re: computer browser service wont start
    ... I've noticed that dnsApi is sometimes one of the things that starts early before everything it needs is actually working, e.g. the TCP/IP and network stack. ... In the situations I've seen the Event Log entry from dnsApi that you report, the computer did successfully register itself later. ... This assumes that the targetted DNS server can accept Dynamic registrations and the computer doing the dynamic registration is permitted to do so. ...
    (microsoft.public.windows.server.general)
  • local network throughput issues
    ... I've been having some serious network throughput issues recently. ... Module sk/miibus failed to register: ... <ACPI PCI bus> on pcib0 ... configured irq 4 not in bitmap of probed irqs 0 ...
    (freebsd-hackers)
  • RE: The system failed to register host (A) resource records (RRs).
    ... Right click Local Network Connection and select Properties. ... please make sure if you have checked the option "Register ... Client in one subnet are able to ... |> computer from the network" on the Default Domain Controllers Policy. ...
    (microsoft.public.windowsxp.network_web)
  • Re: HELP - Cant Browse Network Neighborhood in a Domain
    ... my only issue is that remote server isn't showing up in Network ... > The only reasons I can think of for a DC to not register as a browse ... >>> branch and we set up a domain controller down there. ...
    (microsoft.public.windows.server.networking)
  • Re: VPN Router
    ... to register one in order for any client to see our net, ... >> ISA running on the server but can install it. ... >> (Network Operations ...
    (microsoft.public.windows.server.sbs)