From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 9971 invoked by alias); 10 Jan 2019 00:20:09 -0000 Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm Precedence: bulk List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Received: (qmail 9920 invoked by uid 89); 10 Jan 2019 00:20:08 -0000 Authentication-Results: sourceware.org; auth=none X-Spam-SWARE-Status: No, score=2.0 required=5.0 tests=BAYES_50,FREEMAIL_FROM,KAM_THEBAT,RCVD_IN_DNSWL_LOW,SPF_PASS autolearn=no version=3.3.2 spammy=screen, thursday, Thursday, stewart X-HELO: forward105j.mail.yandex.net Received: from forward105j.mail.yandex.net (HELO forward105j.mail.yandex.net) (5.45.198.248) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with ESMTP; Thu, 10 Jan 2019 00:20:05 +0000 Received: from mxback11j.mail.yandex.net (mxback11j.mail.yandex.net [IPv6:2a02:6b8:0:1619::84]) by forward105j.mail.yandex.net (Yandex) with ESMTP id B75C42E0C04; Thu, 10 Jan 2019 03:20:02 +0300 (MSK) Received: from smtp3p.mail.yandex.net (smtp3p.mail.yandex.net [2a02:6b8:0:1472:2741:0:8b6:8]) by mxback11j.mail.yandex.net (nwsmtp/Yandex) with ESMTP id 6qAGSlBPOJ-K2ia8Fch; Thu, 10 Jan 2019 03:20:02 +0300 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.ru; s=mail; t=1547079602; bh=6gKwTs9WiChj3NUAnjfMCVgWUfp+yevCZFurIme8fB4=; h=Date:From:Reply-To:Message-ID:To:Subject:In-Reply-To:References; b=JbqqjPvrTXyShLMlWakeRa4NdwMlffJ0XME1QZ3wowwgto04jwrbPT9gN45yIqze1 80vcYc3rxkeyIQv2cquETtHEax6QvPwQKMrkGQcG3L0oH0Wx+HQH18In8Lj2W27A6p /Sv3cKwU9FNByeKJlb7Qegvsuc01wQFvpuURw0oI= Authentication-Results: mxback11j.mail.yandex.net; dkim=pass header.i=@yandex.ru Received: by smtp3p.mail.yandex.net (nwsmtp/Yandex) with ESMTPSA id pimuBv6ML6-K15CdkXt; Thu, 10 Jan 2019 03:20:01 +0300 (using TLSv1 with cipher ECDHE-RSA-AES128-SHA (128/128 bits)) (Client certificate not present) Received: from [192.168.1.10] (HELO daemon2.darkdragon.lan) by daemon2 (Office Mail Server 0.8.12 build 08053101) with SMTP; Thu, 10 Jan 2019 00:05:23 -0000 Date: Thu, 10 Jan 2019 00:20:00 -0000 From: Andrey Repin Reply-To: cygwin@cygwin.com Message-ID: <1003498871.20190110030523@yandex.ru> To: Bill Stewart , cygwin@cygwin.com Subject: Re: csih_create_privileged_user - use of SeDenyInteractiveLogonRight In-Reply-To: References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-IsSubscribed: yes X-SW-Source: 2019-01/txt/msg00058.txt.bz2 Greetings, Bill Stewart! > Is this correct? In other words, is preventing the account from showing in > the logon screen the _only_ reason for adding SeDenyInteractiveLogonRight? No, SeDenyInteractiveLogon prevents user from creating console sessions, local or remote. This is what service accounts are never supposed to be doing. Yes, by the extension, it will hide the user from welcome screen. -- With best regards, Andrey Repin Thursday, January 10, 2019 3:02:28 Sorry for my terrible english... -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple