asked on

Debug Permissions on XP x64

Hello,

I need help granting debug permissions to a limited user account on Windows XP Pro x64.

I am doing development with Visual Studio 2005 under Limited user account that by default does not have permission to debug SYSTEM processes and Services.

These are the steps I have tried that were unsuccessful:

1. I used the Local Security Policy snap-in to grant "Debug" permission to the limited account. Did not work.

2. I created a new Group called "Debugger users" to which I granted Debug permission, and I added the limited account to the new group. This did not work either.

Whenever I try to attach the debugger to any process that does not belong to the limited account, it tells me "Access denied".

However, the Admin account has no problem debugging any process on the system.

Can anyone help me grant the right permissions to this limited account, so that I can use it for my development?

Thank you,
Rich

ASKER CERTIFIED SOLUTION

Michael Pfister

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

richsolomon

ASKER

Hi, thanks for your response. The article does mention one thing that I didn't think of, so I will try that a little later in the day. If it works, you'll get the points!

Thanks

richsolomon

ASKER

Hi mpfister,

I'm sorry, but it turns out that I had already tried everything that the article mentions. I guess I'll wait to see if I get any more responses.

Thanks again.

SOLUTION

scrathcyboy

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Michael Pfister

Hi Rich,

sorry it didn't help ... running out of ideas. You're sure you got the "Debug" permissions set for the user/group in "User rights assignment" and it won't get overwritten by a group policy?

scrathcyboy

AS I said above, you WANT it to attach the rights from a higher group policy like administrator, since the rights of the debug application are not known, specified, or discoverable, therefore you want higher group rights.

richsolomon

ASKER

Hi mpfister and scrathcyboy,

Thank you both for your responses. It turns out that even in the 32 bit version of Windows, a limited user cannot debug processes belonging to other accounts. So my question was pretty stupid to begin with.

However, to be fair I have awarded equal points to both of you for your trouble.

Thank you both very much for your input,
Rich

scrathcyboy

"It turns out that even in the 32 bit version of Windows, a limited user cannot debug processes belonging to other accounts. "

Oh I did not realize you wanted to do it on another account. The answer is NO, I think Admin can do this, but even then, there should be the possiblliity to keep a debug exclusive to the owner of the process, you would think.