This is the mail archive of the
cygwin
mailing list for the Cygwin project.
Re: csih_create_privileged_user - use of SeDenyInteractiveLogonRight
- From: Andrey Repin <anrdaemon at yandex dot ru>
- To: Bill Stewart <bstewart at iname dot com>, cygwin at cygwin dot com
- Date: Thu, 10 Jan 2019 03:05:23 +0300
- Subject: Re: csih_create_privileged_user - use of SeDenyInteractiveLogonRight
- References: <CANV9t=QQDCwDghXo=fXS-stfZqbnWxdb3SS1U7xD8gcEGdDiGA@mail.gmail.com>
- Reply-to: cygwin at cygwin dot com
Greetings, Bill Stewart!
> Is this correct? In other words, is preventing the account from showing in
> the logon screen the _only_ reason for adding SeDenyInteractiveLogonRight?
No, SeDenyInteractiveLogon prevents user from creating console sessions, local
or remote. This is what service accounts are never supposed to be doing.
Yes, by the extension, it will hide the user from welcome screen.
--
With best regards,
Andrey Repin
Thursday, January 10, 2019 3:02:28
Sorry for my terrible english...
--
Problem reports: http://cygwin.com/problems.html
FAQ: http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple