|
|
|
|
|
by mkup
3353 days ago
|
|
Sometimes elevated command prompt is not powerful enough and you need command prompt running from "SYSTEM" user account (Windows NT equivalent of Unix "root"). You can get that one with psexec tool from Microsoft SysInternals:
psexec.exe -i -s -d %WINDIR%\System32\cmd.exe |
|
Accounts like SYSTEM may be functionally similar to root in so far as they may have the grant option on capabilities and thus have the keys to unlock powers, but good privilege separation design suggests that capabilities shouldn't be idly taken up.
Functionally, an elevated prompt had enough power to blow away the directory I wanted to delete - that is, the account had the capability to take ownership, replace ACLs, and then delete the objects - but following all the steps is fiddly. Cygwin abstracts all that away to the simplified POSIX system.
Something like SYSTEM may have been enough for different reasons; the existing ACLs may have permitted deletion to SYSTEM. But that doesn't mean SYSTEM had more intrinsic abilities (though I believe it does have more capabilities [2]).
[1] https://msdn.microsoft.com/en-us/library/windows/desktop/bb5...
[2] SE_TAKE_OWNERSHIP_NAME in [1]
[3] Things like SE_TCB_NAME in [1], I think.