Mail Archives: cygwin/2004/01/22/04:33:39
Thanks a lot to all who helped me.
In case one encounters this problem the web-site:
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dncode/html/secure06122003.asp
gives an answer.
Creating Various Global Objects May Fail:
Starting with Windows Server 2003, the creation of some global objects,
such as file mapping will fail unless the calling process has the
SeCreateGlobalPrivilege privilege enabled. Note that the privilege check
is limited to the creating of said objects, and does not apply to opening
existing ones. For example, the following code will fail on Windows
Server 2003 unless the process account has this privilege:
HANDLE hMap = CreateFileMapping(INVALID_HANDLE_VALUE,0,PAGE_READWRITE,
0, 0xFFFF,"Global\\MyMapping");
By default this privilege is assigned to all services and administrators.
This privilege also applies when creating symbolic links in the object
manager. The way around this is to either grant the account in question
this privilege, or do not make the object name global. Of course,
the latter may not be possible.
OK now, how to solve this:
Start -> Administrative Tools -> Local Security Policy
Security Settings -> Local Policies -> User Rights Assignment
Key: Create Global Objects
Add the group that has limited rights (e.g. Remote Desktor Users)
Stefan
--
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
Problem reports: http://cygwin.com/problems.html
Documentation: http://cygwin.com/docs.html
FAQ: http://cygwin.com/faq/
- Raw text -