From - Wed Oct 29 11:18:59 1997
Path: news.mitre.org!blanket.mitre.org!agate!newsgate.duke.edu!nntprelay.mathworks.com!news.pbi.net!svlnews.sv.sc.philips.com!usenet
From: Lokisdog <see.my.sig@nospam.com>
Newsgroups: comp.os.ms-windows.nt.admin.security
Subject: Re: SetcbPriviledge -- What is it?
Date: Tue, 28 Oct 1997 13:01:16 -0800
Organization: EDS
Lines: 56
Message-ID: <3456529C.4199@nospam.com>
References: <34564422.439C@spectra-research.com>
Reply-To: see.my.sig@nospam.com
NNTP-Posting-Host: svltst10.sv.sc.philips.com
Mime-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Mailer: Mozilla 3.01 (WinNT; I)

Rex Tincher wrote:
> 
> I've seen a couple of events in the NT 4.0 Server security log saying
> that use of the SeTcbPriviledge was denied.  I'm not too worried
> because I figure it is related to the same DCOM programming that
> produced the previous hundred bizarre messages.  But what the heck is
> a SeTcbPriviledge anyhow?
> 

From the NT Resource Kit (supplement 2):

These are the Windows NT rights (and their meanings) that can be granted
or revoked with NTRIGHTS:

Windows NT right	        Permits user to

SeAssignPrimaryTokenPrivilege	Replace a process level token.
SeAuditPrivilege	        Generate security audits.
SeBackupPrivilege	        Back up files and directories.
SeBatchLogonRight	        Logon as a batch job.
SeChangeNotifyPrivilege	        Bypass traverse checking.
SeCreatePagefilePrivilege	Create a pagefile.
SeCreatePermanentPrivilege	Create permanent shared objects.
SeCreateTokenPrivilege	        Create a token object.
SeDebugPrivilege	        Debug programs.
SeIncreaseBasePriorityPrivilege	Increase scheduling priority.
SeIncreaseQuotaPrivilege	Increase quotas.
SeInteractiveLogonRight	        Log on locally.
SeLoadDriverPrivilege	        Load and unload device drivers.
SeLockMemoryPrivilege	        Lock pages in memory.
SeMachineAccountPrivilege	Add workstations to domain.
SeNetworkLogonRight	        Access this computer from the network.
SeProfileSingleProcessPrivilege	Profile single process.
SeRemoteShutdownPrivilege	Force shutdown from a remote system.
SeRestorePrivilege	        Restore files and directories.
SeSecurityPrivilege	        Manage auditing and security log.
SeServiceLogonRight	        Log on as a service.
SeShutdownPrivilege	        Shut down the system.
SeSystemEnvironmentPrivilege	Modify firmware environment values.
SeSystemProfilePrivilege	Profile system performance.
SeSystemtimePrivilege	        Change the system time.
SeTakeOwnershipPrivilege	Take ownership of files or other objects.

SeTcbPrivilege	                Act as part of the operating system. 
<======== Answer Here

SeUnsolicitedInputPrivilege	Read unsolicited input from a terminal
device.

Overview of Windows NT Resource Kit Tools version 4.00.03 © Microsoft
Corporation 1985 - 1997
_________________________________________________

Eric Arnold                     earnold@hitech.eds.com
Information Systems Engineer    408.524.2844
EDS/Philips, Sunnyvale