Re: csih_create_privileged_user - use of SeDenyInteractiveLogonRight

2019-01-09 Thread Andrey Repin
Greetings, Bill Stewart! > Is this correct? In other words, is preventing the account from showing in > the logon screen the _only_ reason for adding SeDenyInteractiveLogonRight? No, SeDenyInteractiveLogon prevents user from creating console sessions, local or remote. This is what service account

csih_create_privileged_user - use of SeDenyInteractiveLogonRight

2019-01-09 Thread Bill Stewart
Greetings, /usr/share/doc/csih/ChangeLog has the following note for 2015-04-02: * cygwin-service-installation-helper.sh (csih_create_privileged_user): Also add SeDenyInteractiveLogonRight to the service user. otherwise it will be shown on the logon screen in some versions of Windows. >From this