X-Recipient: archive-cygwin AT delorie DOT com X-SWARE-Spam-Status: No, hits=-1.9 required=5.0 tests=AWL,BAYES_00 X-Spam-Check-By: sourceware.org Date: Mon, 9 Feb 2009 17:47:45 +0530 (IST) From: Jaspreet Singh Reply-To: jaspreet_online2000 AT yahoo DOT com Subject: Re: SYSTEM Problem To: cygwin AT cygwin DOT com In-Reply-To: <20090209114754.GB5416@calimero.vinschen.de> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Message-ID: <452078.73149.qm@web95212.mail.in2.yahoo.com> X-IsSubscribed: yes Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm Precedence: bulk List-Id: List-Unsubscribe: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com Delivered-To: mailing list cygwin AT cygwin DOT com > > hi, i just created a new user 'test' in > windows and in /etc/passwd, in > > windows 'test' is a member of 'Users' > group. Now when i run /bin/bash > > as SYSTEM User it 'su' to any user in there > with valid shell, but it is > > not doing 'su' to User 'test'. > >=20 > > So, i tried 'Runas' running CMD as SYSTEM user > of windows its still not > > login in to bash as User 'test'. It saying > 'Permission Denied'. > >=20 > > I just wanted to know that as SYSTEM has rights to > 'su' to any user why > > its not 'su' to user that i just created.=20 >=20 > If the process running as SYSTEM is started as or from a > Windows service, > the the user token of the process has not the "create > a token object" > right starting with Windows Server 2003. This disallows > switching > the user context if no password for the new user is given. Yes you are right, so do you have any sugestion/ideas how to do that on Windows XP SP2/NTFS/CYGWIN1.7. Does cyglsa in any way can help SYSTEM is only able to su to that users that are within its primary group thats Administrators/544 so, what i did was i made test user member of SYSTEM/18 group thats how SYSTEM was able to su to test user. but thats not a good idea to make a regular user part of SYSTEM group. code to run as SYSTEM is, if you want to try it and can get any solution to this.=20 cygrunsrv -I runassys -p C:/WINDOWS/system32/cmd.exe -a "/C start CMD.EXE /K C:\cygwin1.7\bin\bash.exe --login -i" -i --nohide >=20 >=20 > Corinna Add more friends to your messenger and enjoy! Go to http://messenger.= yahoo.com/invite/ -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/