Geek asks and answers

When is SeTcbPrivilege used? ("Act as part of the operating system").

For what purposes is the privilege used SeTcbPrivilegein Windows? Can it be used, for example, to run a program under the SYSTEM account?

+3
source share
2 answers

By acting as part of the operating system, you can do something like create login tokens. It is unlikely that you will ever need to write a service that uses this privilege if you are not writing an authentication provider.

Since you can create access tokens, you can act like any user. Of course, this means that you can run programs under the SYSTEM account, but there are much simpler ways to run something like SYSTEM.

+5
source

To add to Gabe's answer, here's what MS says,

Allows a process to accept the identity of any user and thus gain access to resources to which the user has the right to access. Typically, only low-level authentication services require this privilege.

Default value: not assigned.

, , ; , . , .

, , . .

: Microsoft TechNet

+2

More articles:


All Articles