On Tuesday 15 November 2005 02:07 pm, Martijn van Oosterhout wrote:
> On Tue, Nov 15, 2005 at 01:51:04PM +0100, Magnus Hagander wrote:
> > Huh. The stated problem is that the low privilege account does *not*
> > have the required privilege (to log in).
> > Note that PostgreSQL doesn't really require "log on locally" for
> > anything other than initdb. So if you can initdb on a different box and
> > copy it there, or somehow get the permissions temporarily, the server
> > will workf ine. The server only requires "Log in as a service".
>
> Sorry, my understanding of Windows permissions is hazy at times. You
> have permission to create users, but not permission to run programs as
> the user you created (because you need to "login"). And there is a
> distinction between running as a service and running as a program(?!).
>
> So I think my statement is correct that the above user cannot run
> programs as anything other than administrator privelidges. Like you
> said, if he could, this discussion would be moot.
>
> > If the security is set up so that you can use a local *admin* acconut
> > but not a local *nonadmin* accuont, then your domain people really need
> > to look over their security policies, because they are very very broken
> > indeed.
>
> That was the way I read it and I agree, that's a very broken way to set
> things up.
>
> Have a nice day,
Broken or not, it's a setup I'm not in control over. And I'm certainly not the
guy to hack the "disable admin-security-check on windows" feature:-(
--
Andreas Joseph Krogh <andreak@officenet.no>
Senior Software Developer / Manager
gpg public_key: http://dev.officenet.no/~andreak/public_key.asc
------------------------+---------------------------------------------+
OfficeNet AS | The most difficult thing in the world is to |
Hoffsveien 17 | know how to do a thing and to watch |
PO. Box 425 Skøyen | somebody else doing it wrong, without |
0213 Oslo | comment. |
NORWAY | |
Phone : +47 22 13 01 00 | |
Direct: +47 22 13 10 03 | |
Mobile: +47 909 56 963 | |
------------------------+---------------------------------------------+