Corinna Vinschen writes:
>> There's another fix that should probably go into the scripts: The
>> service users should get SeDenyInteractiveLogonRight (they already have
>> SeDenyRemoteLogonRight). At least on my Windows7 Pro/64bit laptop the
>> accounts show up on the login screen otherwise.
>
> Still, https://cygwin.com/acronyms/#PGA? Really, I mean it.
Sorry, I was temporarily out of round tuits.
Index: cygwin-service-installation-helper.sh
===================================================================
RCS file: /cvs/cygwin-apps/csih/cygwin-service-installation-helper.sh,v
retrieving revision 1.37
diff -r1.37 cygwin-service-installation-helper.sh
3038a3039
> /usr/bin/editrights -a SeDenyInteractiveLogonRight -u
> ${csih_PRIVILEGED_USERNAME} &&
OK to commit?
BTW, is there some deeper reason to use
/usr/bin/editrights -a SeAssignPrimaryTokenPrivilege -u
${csih_PRIVILEGED_USERNAME} &&
/usr/bin/editrights -a SeCreateTokenPrivilege -u
${csih_PRIVILEGED_USERNAME} &&
/usr/bin/editrights -a SeTcbPrivilege -u ${csih_PRIVILEGED_USERNAME} &&
/usr/bin/editrights -a SeDenyInteractiveLogonRight -u
${csih_PRIVILEGED_USERNAME} &&
/usr/bin/editrights -a SeDenyRemoteInteractiveLogonRight -u
${csih_PRIVILEGED_USERNAME} &&
/usr/bin/editrights -a SeServiceLogonRight -u
${csih_PRIVILEGED_USERNAME} &&
username_got_all_rights="yes"
instead of
/usr/bin/editrights \
-a SeAssignPrimaryTokenPrivilege -a SeCreateTokenPrivilege -a
SeTcbPrivilege \
-a SeDenyInteractiveLogonRight -a SeDenyRemoteInteractiveLogonRight \
-a SeServiceLogonRight -u ${csih_PRIVILEGED_USERNAME} &&
username_got_all_rights="yes"
? Because if there is, that seems like a bug in editrights that should
be fixed.
Regards,
Achim.
--
+<[Q+ Matrix-12 WAVE#46+305 Neuron microQkb Andromeda XTk Blofeld]>+
Wavetables for the Waldorf Blofeld:
http://Synth.Stromeko.net/Downloads.html#BlofeldUserWavetables
