locked
Questions about accounts "Local System" and "NT Authority\System" RRS feed

  • Question

  • Can the user rights/privileges granted to "Local System" and "NT Authority\System" be modified?

    I did a quick test:

    1. Started a cmd.exe using "at" command

    2. Ran "whoami /all" to get its privileges

    3. Started gpedit.msc and granted "Take ownership of files or other objects" to "System" accnt

    4. Restarted PC

    5. Started cmd.exe using "at" command

    6. Ran "whoami /all" to get its privileges

    7. Compared the 2 results and it seems like the "System" account still does not have "Take ownership of files or other objects" privilege

    Am I not using the right tool to accomplish the task or are the privileges for these 2 accounts implicitly defined and cannot be changed?

    And one more question: are there any command line tools available to check other user's privileges? Basically a tool like whoami.exe but that checks other users instead of the currently logged on user.

    Thanks!

    Saturday, March 10, 2012 1:57 AM