BleepingComputer.com: Re-enabling SeShutdownPrivilege

For some reason over the course of a few weeks my privs went from
PRIVILEGES INFORMATION
----------------------

Privilege Name Description State
============================= ==================================== ========
SeShutdownPrivilege Shut down the system Enabled
SeChangeNotifyPrivilege Bypass traverse checking Enabled
SeUndockPrivilege Remove computer from docking station Disabled
SeIncreaseWorkingSetPrivilege Increase a process working set Disabled
SeTimeZonePrivilege Change the time zone Disabled

to.

PRIVILEGES INFORMATION
----------------------

Privilege Name Description State
============================= ==================================== ========
SeShutdownPrivilege Shut down the system Disabled
SeChangeNotifyPrivilege Bypass traverse checking Enabled
SeUndockPrivilege Remove computer from docking station Disabled
SeIncreaseWorkingSetPrivilege Increase a process working set Disabled
SeTimeZonePrivilege Change the time zone Disabled

I dont really understand why this would happen, neither administrator nor my user account have this priv anymore. How is it you re-enable a privilege like this?

Hi -
A few items to look at that may relate to your problem.
Also is there a chance that you have had an infection on your computer recently ??
How to reset user rights in the Default Domain Controllers Group Policy object
If you understand about User Rights, please read the link from Microsoft provided above.
Or This Item from Thinstuff.com -

Regards -

well that is the weird thing, i dont even use domain stuff. This is just a stand-alone PC running Windows 7. Could an infection make it a domain computer somehow? This is windows 7 premium so I dont really have access to group policies. How would I go about changing this? I downloaded the Windows Server 2003 Resource Kit Tools and ran ntrights to try and grant myself access. I did this as administrator and it didnt change a single thing.

PRIVILEGES INFORMATION
----------------------

Privilege Name Description State
=============================== ========================================= ========
SeIncreaseQuotaPrivilege Adjust memory quotas for a process Disabled
SeSecurityPrivilege Manage auditing and security log Disabled
SeTakeOwnershipPrivilege Take ownership of files or other objects Disabled
SeLoadDriverPrivilege Load and unload device drivers Disabled
SeSystemProfilePrivilege Profile system performance Disabled
SeSystemtimePrivilege Change the system time Disabled
SeProfileSingleProcessPrivilege Profile single process Disabled
SeIncreaseBasePriorityPrivilege Increase scheduling priority Disabled
SeCreatePagefilePrivilege Create a pagefile Disabled
SeBackupPrivilege Back up files and directories Disabled
SeRestorePrivilege Restore files and directories Disabled
SeShutdownPrivilege Shut down the system Disabled
SeDebugPrivilege Debug programs Disabled
SeSystemEnvironmentPrivilege Modify firmware environment values Disabled
SeChangeNotifyPrivilege Bypass traverse checking Enabled
SeUndockPrivilege Remove computer from docking station Disabled
SeManageVolumePrivilege Perform volume maintenance tasks Disabled
SeImpersonatePrivilege Impersonate a client after authentication Enabled
SeCreateGlobalPrivilege Create global objects Enabled
SeIncreaseWorkingSetPrivilege Increase a process working set Disabled
SeTimeZonePrivilege Change the time zone Disabled
SeCreateSymbolicLinkPrivilege Create symbolic links Disabled


This is the administrative account's privileges.. This doesn't seem default either.

Now my antivirus is coming up with "The publisher of <> has NOT digitally signed their application" This is for vssvc.exe, trustedinstaller, com surrogate, many other windows files which are I would think digitcally signed.. Even svchost.exe is popping up with errors

This post has been edited by logikz: 06 November 2011 - 05:26 AM