Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Re-enabling SeShutdownPrivilege


  • Please log in to reply
2 replies to this topic

#1 logikz

logikz

  • Members
  • 65 posts
  • OFFLINE
  •  
  • Local time:11:12 PM

Posted 03 November 2011 - 05:11 AM

For some reason over the course of a few weeks my privs went from
PRIVILEGES INFORMATION
----------------------

Privilege Name Description State
============================= ==================================== ========
SeShutdownPrivilege Shut down the system Enabled
SeChangeNotifyPrivilege Bypass traverse checking Enabled
SeUndockPrivilege Remove computer from docking station Disabled
SeIncreaseWorkingSetPrivilege Increase a process working set Disabled
SeTimeZonePrivilege Change the time zone Disabled

to.

PRIVILEGES INFORMATION
----------------------

Privilege Name Description State
============================= ==================================== ========
SeShutdownPrivilege Shut down the system Disabled
SeChangeNotifyPrivilege Bypass traverse checking Enabled
SeUndockPrivilege Remove computer from docking station Disabled
SeIncreaseWorkingSetPrivilege Increase a process working set Disabled
SeTimeZonePrivilege Change the time zone Disabled

I dont really understand why this would happen, neither administrator nor my user account have this priv anymore. How is it you re-enable a privilege like this?

BC AdBot (Login to Remove)

 


#2 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:01:12 PM

Posted 04 November 2011 - 07:00 AM

Hi -
A few items to look at that may relate to your problem.
Also is there a chance that you have had an infection on your computer recently ??
How to reset user rights in the Default Domain Controllers Group Policy object
If you understand about User Rights, please read the link from Microsoft provided above.
Or This Item from Thinstuff.com -

Regards -

#3 logikz

logikz
  • Topic Starter

  • Members
  • 65 posts
  • OFFLINE
  •  
  • Local time:11:12 PM

Posted 05 November 2011 - 11:22 PM

well that is the weird thing, i dont even use domain stuff. This is just a stand-alone PC running Windows 7. Could an infection make it a domain computer somehow? This is windows 7 premium so I dont really have access to group policies. How would I go about changing this? I downloaded the Windows Server 2003 Resource Kit Tools and ran ntrights to try and grant myself access. I did this as administrator and it didnt change a single thing.

PRIVILEGES INFORMATION
----------------------

Privilege Name Description State
=============================== ========================================= ========
SeIncreaseQuotaPrivilege Adjust memory quotas for a process Disabled
SeSecurityPrivilege Manage auditing and security log Disabled
SeTakeOwnershipPrivilege Take ownership of files or other objects Disabled
SeLoadDriverPrivilege Load and unload device drivers Disabled
SeSystemProfilePrivilege Profile system performance Disabled
SeSystemtimePrivilege Change the system time Disabled
SeProfileSingleProcessPrivilege Profile single process Disabled
SeIncreaseBasePriorityPrivilege Increase scheduling priority Disabled
SeCreatePagefilePrivilege Create a pagefile Disabled
SeBackupPrivilege Back up files and directories Disabled
SeRestorePrivilege Restore files and directories Disabled
SeShutdownPrivilege Shut down the system Disabled
SeDebugPrivilege Debug programs Disabled
SeSystemEnvironmentPrivilege Modify firmware environment values Disabled
SeChangeNotifyPrivilege Bypass traverse checking Enabled
SeUndockPrivilege Remove computer from docking station Disabled
SeManageVolumePrivilege Perform volume maintenance tasks Disabled
SeImpersonatePrivilege Impersonate a client after authentication Enabled
SeCreateGlobalPrivilege Create global objects Enabled
SeIncreaseWorkingSetPrivilege Increase a process working set Disabled
SeTimeZonePrivilege Change the time zone Disabled
SeCreateSymbolicLinkPrivilege Create symbolic links Disabled


This is the administrative account's privileges.. This doesn't seem default either.

Now my antivirus is coming up with "The publisher of <> has NOT digitally signed their application" This is for vssvc.exe, trustedinstaller, com surrogate, many other windows files which are I would think digitcally signed.. Even svchost.exe is popping up with errors

Edited by logikz, 06 November 2011 - 05:26 AM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users