Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Creating user with SeSecurityPrivilege


30 Sep 2009   #1

Windows 7
 
 
Creating user with SeSecurityPrivilege

Hi,
I notice that on Windows 7 the Administrator has SeSecurityPrivilege. I see this by starting a CMD prompt with Run As Administrator and typing:
Code:
whoami /all
I want to give another user (bkupuser1) the SeSecurityPrivilege.

First I added the user in the Backup Operators group, using

Code:
lusrmgr.msc
However when I started a CMD prompt as the user and did
Code:
whoami /all
I could see the privilege was not granted to the user. I tried:
Code:
gpupdate /force
but that did not work either.
I then started (Group Policy Editor):
Code:
gpedit.msc
this looked like what I wanted. It allowed me to add any number of special privileges to any user, and I did add SeSecurityPrivilege to the bkupuser1 - However, when I started a CMD prompt as the user and did:

Code:
whoami /all
I could see the privilege was not granted to the user. I tried
Code:
gpupdate /force
but still no joy

I rebooted, still no good.
I tried using another program rsop.msc but that was no good either.
This is a very serious problem, as I do not wish to give out the Administrator user account. It should be possible to create a regular user account and assign the appropriate privileges.



My System SpecsSystem Spec
.

01 Oct 2009   #2

Windows 7
 
 

just want to add to this....

I have a support team and want them to do most admin things, but not want to give them the administrator password, but the administrators group on windows 7, doesn’t seem to be really full administrator like on windows 2003.

I want to add the Se_Security_Privilege so these users can alter ACLs.
My System SpecsSystem Spec
01 Oct 2009   #3

XP, Seven, 2008R2
 
 

Quote   Quote: Originally Posted by w7explorer View Post
I then started (Group Policy Editor):
Code:
gpedit.msc
this looked like what I wanted. It allowed me to add any number of special privileges to any user, and I did add SeSecurityPrivilege to the bkupuser1
Are you referring to "Manage auditing and security log" beneath user rights assignment?

Quote   Quote: Originally Posted by w7explorer View Post
the administrators group on windows 7, doesn’t seem to be really full administrator like on windows 2003
Yes that seems to be the case. In Windows 7 the "Administrator" account has more power than any other account in the Administrators group.
My System SpecsSystem Spec
.


Reply

 Creating user with SeSecurityPrivilege




Thread Tools



Similar help and support threads for2: Creating user with SeSecurityPrivilege
Thread Forum
Solved Creating and Configuring New User Account General Discussion
Problem with User Profiles (Creating, Moving) General Discussion
Creating & managing a new user General Discussion
Solved Creating a New User Account Similar to an Existing User Account Performance & Maintenance
Creating User General Discussion
question about creating a new user account General Discussion
Bug? Creating new user? Also, files not locked? General Discussion

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 01:15 AM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33