C
Carl
Dear all,
While running the mytoken and whoami command on my stand-alone W2K
Professional machine, I couldn't help wondering what the output of some
entries meant. I am logged on as an administrator. What are the numbers
behind the "(attributes)" field, or the (X) and (O) prefixing the whoami
entries? I can make a backup of everything, and can shut down the system, so
I'm sure I have the SeBackupPrivilege and SeShutdownPrivilege privilege.
Still, I see a (O)!? Anyone any clue? I surfed numerous sites, but to no
avail.
Thanks for the help,
Carl.
OUTPUT:
Privileges associated with this token (17)
SeChangeNotifyPrivilege - (attributes) 3
SeSecurityPrivilege - (attributes) 2
SeBackupPrivilege - (attributes) 0
SeRestorePrivilege - (attributes) 0
SeSystemtimePrivilege - (attributes) 0
SeShutdownPrivilege - (attributes) 0
SeRemoteShutdownPrivilege - (attributes) 0
SeTakeOwnershipPrivilege - (attributes) 2
SeDebugPrivilege - (attributes) 0
SeSystemEnvironmentPrivilege - (attributes) 0
SeSystemProfilePrivilege - (attributes) 0
SeProfileSingleProcessPrivilege - (attributes) 0
SeIncreaseBasePriorityPrivilege - (attributes) 0
SeLoadDriverPrivilege - (attributes) 2
SeCreatePagefilePrivilege - (attributes) 0
SeIncreaseQuotaPrivilege - (attributes) 0
SeUndockPrivilege - (attributes) 2
(X) SeChangeNotifyPrivilege = Bypass traverse checking
(X) SeSecurityPrivilege = Manage auditing and security log
(O) SeBackupPrivilege = Back up files and directories
(O) SeRestorePrivilege = Restore files and directories
(O) SeSystemtimePrivilege = Change the system time
(O) SeShutdownPrivilege = Shut down the system
(O) SeRemoteShutdownPrivilege = Force shutdown from a remote system
(X) SeTakeOwnershipPrivilege = Take ownership of files or other
objects
(O) SeDebugPrivilege = Debug programs
(O) SeSystemEnvironmentPrivilege = Modify firmware environment values
(O) SeSystemProfilePrivilege = Profile system performance
(O) SeProfileSingleProcessPrivilege = Profile single process
(O) SeIncreaseBasePriorityPrivilege = Increase scheduling priority
(X) SeLoadDriverPrivilege = Load and unload device drivers
(O) SeCreatePagefilePrivilege = Create a pagefile
(O) SeIncreaseQuotaPrivilege = Increase quotas
(X) SeUndockPrivilege = Remove computer from docking station
While running the mytoken and whoami command on my stand-alone W2K
Professional machine, I couldn't help wondering what the output of some
entries meant. I am logged on as an administrator. What are the numbers
behind the "(attributes)" field, or the (X) and (O) prefixing the whoami
entries? I can make a backup of everything, and can shut down the system, so
I'm sure I have the SeBackupPrivilege and SeShutdownPrivilege privilege.
Still, I see a (O)!? Anyone any clue? I surfed numerous sites, but to no
avail.
Thanks for the help,
Carl.
OUTPUT:
Privileges associated with this token (17)
SeChangeNotifyPrivilege - (attributes) 3
SeSecurityPrivilege - (attributes) 2
SeBackupPrivilege - (attributes) 0
SeRestorePrivilege - (attributes) 0
SeSystemtimePrivilege - (attributes) 0
SeShutdownPrivilege - (attributes) 0
SeRemoteShutdownPrivilege - (attributes) 0
SeTakeOwnershipPrivilege - (attributes) 2
SeDebugPrivilege - (attributes) 0
SeSystemEnvironmentPrivilege - (attributes) 0
SeSystemProfilePrivilege - (attributes) 0
SeProfileSingleProcessPrivilege - (attributes) 0
SeIncreaseBasePriorityPrivilege - (attributes) 0
SeLoadDriverPrivilege - (attributes) 2
SeCreatePagefilePrivilege - (attributes) 0
SeIncreaseQuotaPrivilege - (attributes) 0
SeUndockPrivilege - (attributes) 2
(X) SeChangeNotifyPrivilege = Bypass traverse checking
(X) SeSecurityPrivilege = Manage auditing and security log
(O) SeBackupPrivilege = Back up files and directories
(O) SeRestorePrivilege = Restore files and directories
(O) SeSystemtimePrivilege = Change the system time
(O) SeShutdownPrivilege = Shut down the system
(O) SeRemoteShutdownPrivilege = Force shutdown from a remote system
(X) SeTakeOwnershipPrivilege = Take ownership of files or other
objects
(O) SeDebugPrivilege = Debug programs
(O) SeSystemEnvironmentPrivilege = Modify firmware environment values
(O) SeSystemProfilePrivilege = Profile system performance
(O) SeProfileSingleProcessPrivilege = Profile single process
(O) SeIncreaseBasePriorityPrivilege = Increase scheduling priority
(X) SeLoadDriverPrivilege = Load and unload device drivers
(O) SeCreatePagefilePrivilege = Create a pagefile
(O) SeIncreaseQuotaPrivilege = Increase quotas
(X) SeUndockPrivilege = Remove computer from docking station