13.7. Privileges

Access to certain capabilities of the Windows 2000 system is limited byprivileges. For example, in order to shut down the system, your access token must contain the SE_SHUTDOWN_NAME privilege. To set the system time it must contain the SE_SYSTEMTIME_NAME privilege. The following list shows all of the privileges available in Windows NT:

SE_ASSIGNPRIMARYTOKEN_NAMECan assign a process's primary token
SE_AUDIT_NAMECan create audit-log entries
SE_BACKUP_NAMECan perform backups
SE_CHANGE_NOTIFY_NAMECan receive file and directory change notifications. Enabled by default for all users
SE_CREATE_PAGEFILE_NAMECan create a paging file
SE_CREATE_PERMANENT_NAMECan create a permanent object
SE_CREATE_TOKEN_NAMECan create a primary token
SE_DEBUG_NAME ...

Get Win32 System Services: The Heart of Windows® 98 and Windows® 2000 now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.