all groups > dotnet security > january 2007 >
You're in the

dotnet security

group:

How to determine process security level?



How to determine process security level? ESmith
1/23/2007 8:43:05 AM
dotnet security: I want to enumerate through the running processes on the system and
determine if the process is running with a higher security token then the
current user, that is, which are the more privileged processes then the
executing one - how can accomplish this?

TIA

Re: How to determine process security level? Dominick Baier
1/23/2007 1:53:21 PM
Windows (before Vista) does not have a concept of less/more privileged processess/account
(you may know something from *ix systems)

Obviosly there are normal users, administrators and SYSTEM. But two normal
users can have totally different privileges based on a combination of group
memberships and OS privileges.

A normal user could e.g. have the SeTcbPrivilege which makes him as powerful
as SYSTEM...

So it is hard to compare two accounts...

-----
Dominick Baier (http://www.leastprivilege.com)

[quoted text, click to view]

AddThis Social Bookmark Button