DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:mime-version:from:date:message-id:subject:to
	:content-type; q=dns; s=default; b=r05wB6dWRFoQzY1Lg3hzLbSaW1u6f
	Oai5YtDSi3QDQRhqk9WpFvkP8WbG5bs9aKy3pO7GXDnrmAkktawjBIUZ1C00LIiK
	x++YckmbG47WrmRZB+vn8YA+lFcHfmCiSKUgRd64oRAXUOeRKpXt2w3iNur0rYhe
	rd1WtmE2LBTr8o=
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
MIME-Version: 1.0
From: Bill Stewart <bstewart@iname.com>
Date: Wed, 9 Jan 2019 15:12:03 -0700
Message-ID: <CANV9t=QQDCwDghXo=fXS-stfZqbnWxdb3SS1U7xD8gcEGdDiGA@mail.gmail.com>
Subject: csih_create_privileged_user - use of SeDenyInteractiveLogonRight
To: cygwin@cygwin.com
Content-Type: text/plain; charset="UTF-8"

Greetings,

/usr/share/doc/csih/ChangeLog has the following note for 2015-04-02:

* cygwin-service-installation-helper.sh
(csih_create_privileged_user): Also add SeDenyInteractiveLogonRight to the
service user. otherwise it will be shown on the logon screen in some
versions of Windows.

From this comment, it would seem that the only purpose of adding this user
right ("Deny log on locally") is to hide the user from the logon screen.

Is this correct? In other words, is preventing the account from showing in
the logon screen the _only_ reason for adding SeDenyInteractiveLogonRight?

Thanks,

Bill

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple