Questions about accounts "Local System" and "NT Authority\System"

[Guest outerspace9]

Can the user rights/privileges granted to "Local System" and "NT Authority\System" be modified?

I did a quick test:

1. Started a cmd.exe using "at" command

2. Ran "whoami /all" to get its privileges

3. Started gpedit.msc and granted "Take ownership of files or other objects" to "System" accnt

4. Restarted PC

5. Started cmd.exe using "at" command

6. Ran "whoami /all" to get its privileges

7. Compared the 2 results and it seems like the "System" account still does not have "Take ownership of files or other objects" privilege

Am I not using the right tool to accomplish the task or are the privileges for these 2 accounts implicitly defined and cannot be changed?

And one more question: are there any command line tools available to check other user's privileges? Basically a tool like whoami.exe but that checks other users instead of the currently logged on user.

Thanks!

 

Continue reading...