UI tool to set SE_SYSTEMTIME_NAME in Vista / Win7
robert
Is there a Gui tool to set SE_SYSTEMTIME_NAME privilege in Vista /
Win7 - how?
Robert
Jerry Coffin
says...
> upon problem with SetSystemTime on a users remote Vista machine:
>
> Is there a Gui tool to set SE_SYSTEMTIME_NAME privilege in Vista /
> Win7 - how?
I doubt there is, and I don't see how it would do any good if there
was. At least IIRC, privileges are set/cleared on a process by
process basis, so setting the privilege in one process wouldn't have
any effect on your program running in a different process.
--
Later,
Jerry.
robert
So it cannot be allowed permanently for a user (or admin) account
- or a for specific process/programm?
Thus a software wanting to set the clock must be run by
right-click "Run as admin" necessarily? or is there another method?
Robert
Jerry Coffin
says...
[ ... ]
> So it cannot be allowed permanently for a user (or admin) account
> - or a for specific process/programm?
> Thus a software wanting to set the clock must be run by
> right-click "Run as admin" necessarily? or is there another method?
Perhaps there's some confusion here.
There are two separate things that have to happen before an
application can change the system time. First it has to run under a
user account that has the right to change the system time. That right
is assigned to a user group with the Local Security Policy tool
(assuming the computer isn't in a domain).
Once the user has the _right_ to change the system time, the
application has to enable the SE_SYSTEMTIME_NAME privilege to
actually do so. This has to be done inside the application, because
it's enabled or disabled for a specific process, rather than a user.
It sounds like what you're running into is running under an account
that doesn't have the _right_ to change the system time. That right
is normally only given to Administrators, but under Vista even a
member of the Administrators group doesn't normally run with full
administrator rights.
You have a couple of possible ways of telling the OS that the
application should run with full administrative rights. One is as
you've noted, by telling it to run as Administrator. If you don't
want to do the right click thing, you can create a shortcut that
always does so.
Alteratively, you can create an application manifest that says it
needs administrator rights. Unfortunately, manifests are a bit like a
cesspool. From a distance, it looks like a perfect pastoral setting,
with particularly lush grass and trees. When you look closely at the
center of things, however, you find a nasty smelling mess with
documentation that's about as clear as mud.
--
Later,
Jerry.