Windows Forum

Ask something
Discussion Locked

System Polices

0 helpful
5 replies

by melissa

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I an installing Symantec for Exchange on my Windows NT 4.0 server and it told me that I need the right to "Act as part of the operating system", I have given the administrator that right and when I run the set.exe I still get that message. It stillthinks that I need that right, but I have it!??

Please help!

5 replies

by rapidad

that policy and all others can be overridden by the network ipsec policy, so even after changing it on a box if the box is logged into a network with policies defined you will get this message. You said it was on the server, are you running AD, is this the PDC? let us know more....thanks

by rapidad

Some privileges, such as Act as Part of the Operating System and Debug Programs, are extremely potent. An account having the Act as Part of the Operating System privilege (also referred to as the Trusted Computing Base or TCB privilege) essentially behaves as a highly trusted system component. No privilege is more trusted than the TCB privilege, therefore the only account that has it by default is LocalSystem. An account having the Debug Programs privilege can attach to any process and view andadjust its memory.

When a user logs on to a Windows NT or Windows 2000 system, Windows authenticates the account and creates a token for that user. The token is applied to every process and every thread within each process that the user starts up. The token contains the user's SID, SIDs for each group the user belongs to, and privileges held by the user. Starting with Windows 2000, the token can also contain information about which SIDs and privileges are explicitly disabled, these are referred to as restricted tokens.

by rapidad

was this how you set the priveledge??

The text below defines the advanced user rights that the Windows NT User Manager controls. To administer these rights, run User Manager and choose User Rights from the Policies menu. Then choose Show AdvancedUser Rights. The text below defines the advanced user rights that the Windows NT User Manager controls. To administer these rights, run User Manager and choose User Rights from the Policies menu. Then choose Show Advanced User Rights.

The advanced user rights are as follows:
To Act as Part of the Operating System
SE_TCB_NAME
SeTcbPrivilege

by melissa

This machine is the PDC... The example you showed me is how I set the priveledge's. Would I need to restart the server and log back in as the administrator? What is the ipsec policy?

This discussion is closed to new replies.