1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Win 7 and SE_SYSTEMTIME_NAME

Discussion in 'Plugins' started by vefatica, Mar 10, 2012.

  1. vefatica

    Joined:
    May 20, 2008
    Messages:
    8,129
    Likes Received:
    33
    Rex, I have used SECPOL.MSC to give everyone the right to set the system time (and restarted). Still, none of my programs that ask for the SE_SYSTEMTIME_NAME privilege can get it. TCC's TIME can't set the time either, as non-admin (don't know if you ask for SE_SYSTEMTIME_NAME).

    Do you know why I can't get that privilege if local security says it's OK?
     
  2. Frank

    Joined:
    Aug 2, 2011
    Messages:
    258
    Likes Received:
    4
    I can reproduce the error. But cmd throws the same error (missing right).
     
  3. vefatica

    Joined:
    May 20, 2008
    Messages:
    8,129
    Likes Received:
    33
    I asked about this in an MSDN forum and apparently got an answer. I am an admin, and when a security token is created for me under UAC, certain privileges are stripped out of an admin token WITHOUT consulting local security policy. So, having allowed everyone to set the time, an ordinary user can do it, but not me, an admin under UAC. I tested that with an ordinary user, RUNAS.EXE, and CMD's TIME command. Sure enough, the ordinary user can set the time and I can't. Good one, Microsoft!
     
  4. Frank

    Joined:
    Aug 2, 2011
    Messages:
    258
    Likes Received:
    4
    wow, that's desolate.
     

Share This Page