From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 4977 invoked by alias); 24 Jun 2005 16:42:19 -0000 Mailing-List: contact cygwin-talk-help@cygwin.com; run by ezmlm Precedence: bulk List-Subscribe: List-Post: List-Help: , Sender: cygwin-talk-owner@cygwin.com Reply-To: The Cygwin-Talk Malingering List Received: (qmail 4964 invoked by uid 22791); 24 Jun 2005 16:42:15 -0000 Received: from p54941a60.dip0.t-ipconnect.de (HELO calimero.vinschen.de) (84.148.26.96) by sourceware.org (qpsmtpd/0.30-dev) with ESMTP; Fri, 24 Jun 2005 16:42:15 +0000 Received: by calimero.vinschen.de (Postfix, from userid 500) id 43E94544122; Fri, 24 Jun 2005 18:42:21 +0200 (CEST) Date: Fri, 24 Jun 2005 17:12:00 -0000 From: Corinna Vinschen To: 'Freedom for rubber plants' Subject: Re: [spam] Re: Windows rights Message-ID: <20050624164221.GA8132@calimero.vinschen.de> Reply-To: cygwin-talk@cygwin.com Mail-Followup-To: 'Freedom for rubber plants' References: <20050623175338.GX2814@calimero.vinschen.de> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.4.2i X-SW-Source: 2005-q2/txt/msg00490.txt.bz2 On Jun 24 16:03, Dave Korn wrote: > LocalSystem is an account. An account is an object in the AD. There is > an access token associated with that account. An access token is a > container in the LSA. Within that container there are two SIDs. A SID is > another kind of object. When you pass the correct login details to the LSA, > that correspond to those recorded in the account object, it creates the > access token container and places two SID objects in it. One of those SID > objects is SYSTEM. - LocalSystem has nothing to do with AD. - What are the two SIDs you're talking about? Did you see an access token from the inside? There are lots of SIDs in it, the user, the owner, the primary group, the group list and, in a restricted token, the list of restricted SIDs. > So LocalSystem is an AD record that contains the details of which SIDs - LocalSystem does not exist in AD since it's a *local* account, not a domain account. > should be placed in the access token, and SYSTEM is one of those SIDs. How does that differ from any other user account? A user has a SID (or uid) and when creating a default logon session then the SAM or AD or /etc/passwd + /etc/group determine how the access token (user/group list) look like. We're still talking artificial here. Corinna