[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 392
  • Last Modified:

Debug Permissions on XP x64

Hello,

I need help granting debug permissions to a limited user account on Windows XP Pro x64.

I am doing development with Visual Studio 2005 under Limited user account that by default does not have permission to debug SYSTEM processes and Services.

These are the steps I have tried that were unsuccessful:

1.  I used the Local Security Policy snap-in to grant "Debug" permission to the limited account.  Did not work.

2.  I created a new Group called "Debugger users" to which I granted Debug permission, and I added the limited account to the new group.  This did not work either.

Whenever I try to attach the debugger to any process that does not belong to the limited account, it tells me "Access denied".

However, the Admin account has no problem debugging any process on the system.

Can anyone help me grant the right permissions to this limited account, so that I can use it for my development?

Thank you,
Rich
0
richsolomon
Asked:
richsolomon
  • 3
  • 3
  • 2
2 Solutions
 
Michael PfisterCommented:
Have you read this kb article? http://support.microsoft.com/kb/329282/en-us
I don't know if there is a difference between 32 and 64 bit OS ...

Hope it helps,

Michael
0
 
richsolomonAuthor Commented:
Hi, thanks for your response.  The article does mention one thing that I didn't think of, so I will try that a little later  in the day.  If it works, you'll get the points!

Thanks
0
 
richsolomonAuthor Commented:
Hi mpfister,

I'm sorry, but it turns out that I had already tried everything that the article mentions.  I guess I'll wait to see if I get any more responses.

Thanks again.

0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
scrathcyboyCommented:
This is not easy to do, unless you know what permission level the debug process runs under.  Is it a "Power user", is it a backup user?  Or does it require full admin rights?  Is there any reason you cant give the person using the program full admin rights?  can you trust them not to foul up the system?  If so, just go into that persons account (or else the process account for the application, system level) and add it to the Administrator group. That will attach to that profile administrator rights (you can try power user instead but it might now work).  You know how to get to these rights, right?  start Admin Tools computer management, user accounts, open the account and add it to the group you want.  YOu will figure that out soon enough.
0
 
Michael PfisterCommented:
Hi Rich,

sorry it didn't help ... running out of ideas. You're sure you got the "Debug" permissions set for the user/group in "User rights assignment" and it won't get overwritten by a group policy?

0
 
scrathcyboyCommented:
AS I said above, you WANT it to attach the rights from a higher group policy like administrator, since the rights of the debug application are not known, specified, or discoverable, therefore you want higher group rights.
0
 
richsolomonAuthor Commented:
Hi mpfister and scrathcyboy,

Thank you both for your responses.  It turns out that even in the 32 bit version of Windows, a limited user cannot debug processes belonging to other accounts.  So my question was pretty stupid to begin with.

However, to be fair I have awarded equal points to both of you for your trouble.  

Thank you both very much for your input,
Rich
0
 
scrathcyboyCommented:
"It turns out that even in the 32 bit version of Windows, a limited user cannot debug processes belonging to other accounts. "

Oh I did not realize you wanted to do it on another account.  The answer is NO, I think Admin can do this, but even then, there should be the possiblliity to keep a debug exclusive to the owner of the process, you would think.
0

Featured Post

Vote for the Most Valuable Expert

It’s time to recognize experts that go above and beyond with helpful solutions and engagement on site. Choose from the top experts in the Hall of Fame or on the right rail of your favorite topic page. Look for the blue “Nominate” button on their profile to vote.

  • 3
  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now