WINBUILD: When revoking user rights, make sure we are really revoking them.

This commit is contained in:
Rom Walton 2014-05-08 14:32:03 -04:00
parent ab02b21c02
commit 972b104db2
5 changed files with 4 additions and 7 deletions

View File

@ -100,7 +100,7 @@ UINT CARevokeBOINCMasterRights::OnExecution()
GrantUserRight(pSid, L"SeInteractiveLogonRight", FALSE);
GrantUserRight(pSid, L"SeServiceLogonRight", FALSE);
GrantUserRight(pSid, L"SeDenyNetworkLogonRight", FALSE);
GrantUserRight(pSid, L"SeDenyInteractiveLogonRight", TRUE);
GrantUserRight(pSid, L"SeDenyInteractiveLogonRight", FALSE);
GrantUserRight(pSid, L"SeDenyBatchLogonRight", FALSE);
GrantUserRight(pSid, L"SeDenyServiceLogonRight", FALSE);
GrantUserRight(pSid, L"SeDenyRemoteInteractiveLogonRight", FALSE);

View File

@ -99,7 +99,6 @@ UINT CARevokeBOINCProjectsRights::OnExecution()
GrantUserRight(pSid, L"SeDenyServiceLogonRight", FALSE);
GrantUserRight(pSid, L"SeDenyRemoteInteractiveLogonRight", FALSE);
// Privileges
GrantUserRight(pSid, L"SeTcbPrivilege", FALSE);
GrantUserRight(pSid, L"SeMachineAccountPrivilege", FALSE);
@ -129,7 +128,6 @@ UINT CARevokeBOINCProjectsRights::OnExecution()
GrantUserRight(pSid, L"SeShutdownPrivilege", FALSE);
GrantUserRight(pSid, L"SeSynchAgentPrivilege", FALSE);
GrantUserRight(pSid, L"SeTakeOwnershipPrivilege", FALSE);
}
else
{

View File

@ -105,11 +105,11 @@ UINT CARevokeBOINCUsersRights::OnExecution()
GrantUserRight(pSid, L"SeMachineAccountPrivilege", FALSE);
GrantUserRight(pSid, L"SeIncreaseQuotaPrivilege", FALSE);
GrantUserRight(pSid, L"SeBackupPrivilege", FALSE);
GrantUserRight(pSid, L"SeChangeNotifyPrivilege", TRUE);
GrantUserRight(pSid, L"SeChangeNotifyPrivilege", FALSE);
GrantUserRight(pSid, L"SeSystemTimePrivilege", FALSE);
GrantUserRight(pSid, L"SeCreateTokenPrivilege", FALSE);
GrantUserRight(pSid, L"SeCreatePagefilePrivilege", FALSE);
GrantUserRight(pSid, L"SeCreateGlobalPrivilege", TRUE);
GrantUserRight(pSid, L"SeCreateGlobalPrivilege", FALSE);
GrantUserRight(pSid, L"SeDebugPrivilege", FALSE);
GrantUserRight(pSid, L"SeEnableDelegationPrivilege", FALSE);
GrantUserRight(pSid, L"SeRemoteShutdownPrivilege", FALSE);
@ -124,12 +124,11 @@ UINT CARevokeBOINCUsersRights::OnExecution()
GrantUserRight(pSid, L"SeProfileSingleProcessPrivilege", FALSE);
GrantUserRight(pSid, L"SeSystemProfilePrivilege", FALSE);
GrantUserRight(pSid, L"SeUndockPrivilege", FALSE);
GrantUserRight(pSid, L"SeAssignPrimaryTokenPrivilege", TRUE);
GrantUserRight(pSid, L"SeAssignPrimaryTokenPrivilege", FALSE);
GrantUserRight(pSid, L"SeRestorePrivilege", FALSE);
GrantUserRight(pSid, L"SeShutdownPrivilege", FALSE);
GrantUserRight(pSid, L"SeSynchAgentPrivilege", FALSE);
GrantUserRight(pSid, L"SeTakeOwnershipPrivilege", FALSE);
}
else
{