From: corinna DOT vinschen AT cityweb DOT de (Corinna Vinschen)
Subject: Re: crond for CYGWIN32?
13 Oct 1998 00:04:50 -0700
Message-ID: <3621CC46.2A26A2EB.cygnus.gnu-win32@cityweb.de>
References: <199810120023 DOT CAA25847 AT igate DOT aubi DOT de>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
To: "[SMTP:markus DOT doehr AT aubi DOT de]" <markus DOT doehr AT aubi DOT de>, gnu-win32 AT cygnus DOT com

[SMTP:markus DOT doehr AT aubi DOT de] wrote:
> 
> >The worst problem, 'cause it's persistent:
> >Under WinNT, you can't create a child process as another
> >user, if you don't know the password, even if the parent
> >process runs as Administrator or, in case of services,
> >as LocalSystem.
> In the NT 4.0 Ressource-Kit utils there's a Util called SU.EXE. You
> can switch the user context like under Unix.

You are right, there is a SU.EXE, 

BUT:

You have to know the password, as Administrator, too...
Also the SU-program can't undermine the C2-Security of the
WindowsNT-Kernel.

The problem remains the same :-[

Corinna


-
For help on using this list (especially unsubscribing), send a message to
"gnu-win32-request AT cygnus DOT com" with one line of text: "help".