Creating user with SeSecurityPrivilege


  1. Posts : 3
    Windows 7
       #1

    Creating user with SeSecurityPrivilege


    Hi,
    I notice that on Windows 7 the Administrator has SeSecurityPrivilege. I see this by starting a CMD prompt with Run As Administrator and typing:
    Code:
    whoami /all
    I want to give another user (bkupuser1) the SeSecurityPrivilege.

    First I added the user in the Backup Operators group, using

    Code:
    lusrmgr.msc
    However when I started a CMD prompt as the user and did
    Code:
    whoami /all
    I could see the privilege was not granted to the user. I tried:
    Code:
    gpupdate /force
    but that did not work either.
    I then started (Group Policy Editor):
    Code:
    gpedit.msc
    this looked like what I wanted. It allowed me to add any number of special privileges to any user, and I did add SeSecurityPrivilege to the bkupuser1 - However, when I started a CMD prompt as the user and did:

    Code:
    whoami /all
    I could see the privilege was not granted to the user. I tried
    Code:
    gpupdate /force
    but still no joy

    I rebooted, still no good.
    I tried using another program rsop.msc but that was no good either.
    This is a very serious problem, as I do not wish to give out the Administrator user account. It should be possible to create a regular user account and assign the appropriate privileges.
      My Computer


  2. Posts : 3
    Windows 7
    Thread Starter
       #2

    just want to add to this....

    I have a support team and want them to do most admin things, but not want to give them the administrator password, but the administrators group on windows 7, doesn’t seem to be really full administrator like on windows 2003.

    I want to add the Se_Security_Privilege so these users can alter ACLs.
      My Computer


  3. Posts : 1,557
    XP, Seven, 2008R2
       #3

    w7explorer said:
    I then started (Group Policy Editor):
    Code:
    gpedit.msc
    this looked like what I wanted. It allowed me to add any number of special privileges to any user, and I did add SeSecurityPrivilege to the bkupuser1
    Are you referring to "Manage auditing and security log" beneath user rights assignment?

    w7explorer said:
    the administrators group on windows 7, doesn’t seem to be really full administrator like on windows 2003
    Yes that seems to be the case. In Windows 7 the "Administrator" account has more power than any other account in the Administrators group.
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 00:09.
Find Us