Identifying special accounts

Thanks!  That was the needle I was looking for.

-Mont


On 1/5/07, Peter Ritchie <
advanced.dotnet.discuss.develop.competerritchie.com> wrote:
>
> The quick answer is you have to Pinvoke
LsaEnumerateAccountRights to find
> out what rights a particular account has the
> "SeDenyInteractiveLogonRight"-
> -which means that account can't login locally.
>
> Of course, it's much easier said then done...
>
> There was a recent thread on this list discussing the
ability to test/set
> the logon-as-service right (same logic, looking
> for "SeServiceLogonRight").  That thread
seemed to delegate to
> http
://www.codeproject.com/csharp/lsadotnet.asp; but, I
don't think that
> actually "tests" whether an account has a
particular right or not.
>
> On Fri, 5 Jan 2007 10:16:00 -0800, Mont Rothstein
> <mont.rothsteinGMAIL.COM> wrote:
>
> >Yes, that is what I mean.
> >
> >Is there a way to determine which acounts do or
don't have local login
> >rights?
>
> ===================================
> This list is hosted by DevelopMentor(r)  http://www.develop.com
>
> View archives and manage your subscription(s) at
> http://discuss.develop.com

>

===================================
This list is hosted by DevelopMentorŪ  http://www.develop.com

View archives and manage your subscription(s) at http://discuss.develop.com