X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:reply-to:message-id:to:subject
	:in-reply-to:references:mime-version:content-type
	:content-transfer-encoding; q=dns; s=default; b=JaF+iUhmk6+TZal2
	bURlyjZoXeSCVeNRyaIkG5P5M1lqySKUgIRNyE7Rv+K05JgG/Ff12jXs6wOkp6pd
	UVFK+iGTNWxBm/DQIFFP8wryEqaqXrLW8Gt4K/OKglnu5V8a23crhdVbHKiWoMcu
	qgOOl/J3Xm0sHOqogdMgYSs8C8c=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:reply-to:message-id:to:subject
	:in-reply-to:references:mime-version:content-type
	:content-transfer-encoding; s=default; bh=IhYR29eD8vY9wDGh7UgZuH
	PFW9E=; b=gQo3DVMCkGvYAaImiTfMR9e9rn/nGVxbG09E5otzIEFBSqkP4jdiNS
	eiQjmT3Os+z4jNcP8xwhVeX1yHY9/rIBML+0p7zwDjxOj6b1BeFkcGqhLIEUjfoG
	qh+hB8OIvEV7AsKU4kqybtftE+h7p7VntNefKFmSSSeFA2Z12g6GQ=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Spam-SWARE-Status: No, score=2.0 required=5.0 tests=BAYES_50,FREEMAIL_FROM,KAM_THEBAT,RCVD_IN_DNSWL_LOW,SPF_PASS autolearn=no version=3.3.2 spammy=screen, thursday, Thursday, stewart
X-HELO: forward105j.mail.yandex.net
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.ru; s=mail; t=1547079602;	bh=6gKwTs9WiChj3NUAnjfMCVgWUfp+yevCZFurIme8fB4=;	h=Date:From:Reply-To:Message-ID:To:Subject:In-Reply-To:References;	b=JbqqjPvrTXyShLMlWakeRa4NdwMlffJ0XME1QZ3wowwgto04jwrbPT9gN45yIqze1	 80vcYc3rxkeyIQv2cquETtHEax6QvPwQKMrkGQcG3L0oH0Wx+HQH18In8Lj2W27A6p	 /Sv3cKwU9FNByeKJlb7Qegvsuc01wQFvpuURw0oI=
Authentication-Results: mxback11j.mail.yandex.net; dkim=pass header.i=@yandex.ru
Date: Thu, 10 Jan 2019 03:05:23 +0300
From: Andrey Repin <anrdaemon AT yandex DOT ru>
Reply-To: cygwin AT cygwin DOT com
Message-ID: <1003498871.20190110030523@yandex.ru>
To: Bill Stewart <bstewart AT iname DOT com>, cygwin AT cygwin DOT com
Subject: Re: csih_create_privileged_user - use of SeDenyInteractiveLogonRight
In-Reply-To: <CANV9t=QQDCwDghXo=fXS-stfZqbnWxdb3SS1U7xD8gcEGdDiGA@mail.gmail.com>
References: <CANV9t=QQDCwDghXo=fXS-stfZqbnWxdb3SS1U7xD8gcEGdDiGA AT mail DOT gmail DOT com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-IsSubscribed: yes

Greetings, Bill Stewart!

> Is this correct? In other words, is preventing the account from showing in
> the logon screen the _only_ reason for adding SeDenyInteractiveLogonRight?

No, SeDenyInteractiveLogon prevents user from creating console sessions, local
or remote. This is what service accounts are never supposed to be doing.
Yes, by the extension, it will hide the user from welcome screen.


-- 
With best regards,
Andrey Repin
Thursday, January 10, 2019 3:02:28

Sorry for my terrible english...


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple