Re: [ros-kernel] Forward: "ReactOS is too limited"

[KJK::Hyperion <no...@li...>]

At 06.11 31/05/2002, you wrote:
>P.S.: Further up in the thread it was said that the administrator can gain 
>'kill services' rights through some setting - anyone knows from the top of 
>their head which setting that is? Thanks!

the short answer: you need the SeDebug privilege
the long answer: NT security has the concept of capabilities/privileges. 
The Unix root user would be an user account with all privileges granted 
*and* enabled, while the NT Administrator merely has most privileges 
granted, but not enabled. Security-aware programs will enable the needed 
privileges first. Task manager, for example, doesn't. Good for normal 
users, bad for an admin. BTW, here are the privileges an Unix root user needs:

Privilege             Effect when enabled
----------------------------------------------------------------------------
SeBackup              bypass file and registry ACLs when writing data
SeRestore             bypass file and registry ACLs when reading data
SeDebug               bypass process and thread ACLs
SeTakeOwnership       bypass checks when taking ownership of an object
SeAssignPrimaryToken  ability to assign a process's primary token (Unix
                       "real user id" and "real group id")
SeLockMemory          ability to lock memory (i.e. make memory non-pageable)
SeSystemTime          ability to set system time
SeShutdown            ability to shutdown the local system
SeLoadDriver          ability to load device drivers
SeTcb                 ability to act as an operating system component