WinSecWiki

WinSecWiki » Windows Security Settings » Local Policies » User Rights Assignment » User Rights In-Depth » Create global objects

Create global objects

Expand / Collapse
 
     

Create global objects


AKA: SeCreateGlobalPrivilege, Create global objects

Default assignment: Administrators, SERVICE

A process requires this right in order to create sections and/or symbolic link objects in the directories of Object Manager. This right is required for users running inside a Terminal Services session in order to create an object in the system global name space. This right was apparently added to prevent poorly written applications from creating objects like semaphores and named pipes that conflict with each other in the global name space for the system.

This right should normally be left at its default settings. If you run into memory or other errors running applications under Terminal Services, this right may be the cause. See http://support.microsoft.com/kb/821546

This right first appeared in Windows 2003 and SP4 for Windows 2000.

Add Your Comments


Name: *
Email Address:
Web Address:
Verification Code:
*
 

Details
Rated 4 stars based on 1 vote.
Article has been viewed 4,227 times.
Options