X-Recipient: archive-cygwin AT delorie DOT com
X-Spam-Check-By: sourceware.org
Date: Mon, 9 Feb 2009 18:21:01 +0100
From: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: SYSTEM Problem
Message-ID: <20090209172101.GH5416@calimero.vinschen.de>
Reply-To: cygwin AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
References: <20090209114754 DOT GB5416 AT calimero DOT vinschen DOT de> <452078 DOT 73149 DOT qm AT web95212 DOT mail DOT in2 DOT yahoo DOT com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <452078.73149.qm@web95212.mail.in2.yahoo.com>
User-Agent: Mutt/1.5.17 (2007-11-01)
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Precedence: bulk
List-Id: <cygwin.cygwin.com>
List-Unsubscribe: <mailto:cygwin-unsubscribe-archive-cygwin=delorie DOT com AT cygwin DOT com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com

On Feb  9 17:47, Jaspreet Singh wrote:
> > > hi, i just created a new user 'test' in
> > windows and in /etc/passwd, in
> > >  windows 'test' is a member of 'Users'
> > group. Now when i run /bin/bash
> > > as SYSTEM User it 'su' to any user in there
> > with valid shell, but it is
> > > not doing 'su' to User 'test'.
> > > 
> > > So, i tried 'Runas' running CMD as SYSTEM user
> > of windows its still not
> > >  login in to bash as User 'test'. It saying
> > 'Permission Denied'.
> > > 
> > > I just wanted to know that as SYSTEM has rights to
> > 'su' to any user why
> > >  its not 'su' to user that i just created. 
> > 
> > If the process running as SYSTEM is started as or from a
> > Windows service,
> > the the user token of the process has not the "create
> > a token object"
> > right starting with Windows Server 2003.  This disallows
> > switching
> > the user context if no password for the new user is given.
> 
>   Yes you are right, so do you have any sugestion/ideas how to do
>   that on Windows XP SP2/NTFS/CYGWIN1.7. Does cyglsa in any way
>   can help

Yes, as well as storing the password in the registry.
See http://cygwin.com/1.7/cygwin-ug-net/ntsec.html#ntsec-setuid-overview


Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Project Co-Leader          cygwin AT cygwin DOT com
Red Hat

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/