Re: Hibernate once - resume many

Tech-Archive recommends: Fix windows errors by optimizing your registry

Slobodan,

> Are you sure that it enables the SE_SHUTDOWN_NAME privilege?

Yes, I am :-( I saw the calls to OpenThreadToken/LookupPrivilegeValue(SE_SHUTDOWN_NAME)/AdjustTokenPrivileges(SE_PRIVILEGE_ENABLED)
on the trace.

This is really not an embedded design but on XP Pro it is likely for good becuase regardless of the current user rights&priviledges
you want them to have all the buttons enabled on the Gina dialogs.

Regards,
Konstantin

> I think that this should work on principle if you have enough rights then you can take SE_SHUTDOWN_NAME as we do when we want to
> reboot.
>
> If we revoke that rights then you should not be able to associate SE_SHUTDOWN_NAME right with your process token.
> This should be tested or at least analyzed from doc I'm talking here from head and it is 8:00 AM I'm too much dizzy to thinks
> straight.
>
> Regards,
> Slobodan
>
> "KM" <konstmor@xxxxxxxxxxxxxxxx> wrote in message news:uEt06QbNFHA.3668@xxxxxxxxxxxxxxxxxxxxxxx
>> Slobodan,
>>
>> Although it is a good idea I don't think it is going to work.
>> From my investigation it seeemed that that MS Gina code that is responsible for the "Turn Off" dialog requests for (enables) the
>> SE_SHUTDOWN_NAME privilege for the current user temporarily prior and while making the call to NtPowerInformation :-(
>>
>> I guess this is one more feature to be requested for XPe to make it more *embedded*.
>>
>> Regards,
>> Konstantin
>>
>>> Alex,
>>>
>>> I have no enough time right now to try to figure this out (test this), but please try following and let us know:
>>>
>>> Use LsaRemoveAccountRights to revoke SE_SHUTDOWN_NAME privilege for all user accounts including admin accounts except the
>>> account which privileges you will use for hibernation.
>>> Or after HORM resume you can revoke this right for current user.
>>>
>>> In registry I think that this info is stored in HKLM\SECURITY\Policy\Accounts\AccountSID.
>>>
>>> Have fun with this and let us know if you figured this out.
>>>
>>> Regards,
>>> Slobodan
>>>
>>>
>>> "KM" <konstmor@xxxxxxxxxxxxxxxx> wrote in message news:eGPPsbXNFHA.1476@xxxxxxxxxxxxxxxxxxxxxxx
>>>> Alex,
>>>>
>>>> Good catch. I'd also love to know how they were thinking to accomplish that. Unless they talk about a custom shell there where
>>>> we
>>>> create the "shutdown" menu ourselves, I don't know an easy way to remove the Hibernate/Standby options (buttons) off the
>>>> Explorer
>>>> standard shutdown dialog (more specifically, Winlogon/Gina).
>>>>
>>>> If you find a way, let us know here. That would be an interesting finding.
>>>>
>>>> --
>>>> Regards,
>>>> KM, BSquare Corp.
>>>>
>>>>
>>>>> Thanks for the help, please take a look at the following. In Target
>>>>> Designer, please search under Help for "Design Considerations for using EWF
>>>>> with Hibernation". The second paragraph under the first bullet recommends
>>>>> removing the Hibernation option from the Shutdown menu. It does not say how
>>>>> to accomplish this task.
>>>>>
>>>>> "KM" wrote:
>>>>>
>>>>> > Alec,
>>>>> >
>>>>> > Yes, it will certainly disable HORM.
>>>>> >
>>>>> > Unfortunately, the dialog you are asking about is a part of MS Gina. Without replacing the Winlogon's GINA I don't know any
>>>>> > easy
>>>> and
>>>>> > legal way to "change" the button layout on the dialog.
>>>>> > The dialog shows the Hibernate and StandBy button querying to NtPowerInformation to check whether the Hibernate and StandBy
>>>> features
>>>>> > supported. There is no registry control of the button appearance :-(
>>>>> >
>>>>> > --
>>>>> > Regards,
>>>>> > KM, BSquare Corp.
>>>>> >
>>>>> >
>>>>> > > Won't that disable my hibernate once - resume many?
>>>>> > >
>>>>> > > "KM" wrote:
>>>>> > >
>>>>> > > > Alec,
>>>>> > > >
>>>>> > > > Just disable the Hibernation support at run time (power applet, IIRC) or in TD Configuration on HAL (PC) component
>>>>> > > > settings
>>>>> > page.
>>>>> > > >
>>>>> > > > --
>>>>> > > > Regards,
>>>>> > > > KM, BSquare Corp.
>>>>> > > >
>>>>> > > > PS. The post subject sounded confusing and not related to the post itself. Let us know if you meant something else.
>>>>> > > >
>>>>> > > > > Does anyone know how to remove the hibernate option from the Power Off
>>>>> > > > > options window? I only want "Turn Off" and "Restart" as options.
>>>>> >
>>>>> >
>>>>> >
>>>>
>>>>
>>>
>>>
>>
>>
>
>


.

Quantcast