On Tuesday 15 November 2005 02:07 pm, Martijn van Oosterhout wrote: > On Tue, Nov 15, 2005 at 01:51:04PM +0100, Magnus Hagander wrote: > > Huh. The stated problem is that the low privilege account does *not* > > have the required privilege (to log in). > > Note that PostgreSQL doesn't really require "log on locally" for > > anything other than initdb. So if you can initdb on a different box and > > copy it there, or somehow get the permissions temporarily, the server > > will workf ine. The server only requires "Log in as a service". > > Sorry, my understanding of Windows permissions is hazy at times. You > have permission to create users, but not permission to run programs as > the user you created (because you need to "login"). And there is a > distinction between running as a service and running as a program(?!). > > So I think my statement is correct that the above user cannot run > programs as anything other than administrator privelidges. Like you > said, if he could, this discussion would be moot. > > > If the security is set up so that you can use a local *admin* acconut > > but not a local *nonadmin* accuont, then your domain people really need > > to look over their security policies, because they are very very broken > > indeed. > > That was the way I read it and I agree, that's a very broken way to set > things up. > > Have a nice day,
Broken or not, it's a setup I'm not in control over. And I'm certainly not the guy to hack the "disable admin-security-check on windows" feature:-( -- Andreas Joseph Krogh <[EMAIL PROTECTED]> Senior Software Developer / Manager gpg public_key: http://dev.officenet.no/~andreak/public_key.asc ------------------------+---------------------------------------------+ OfficeNet AS | The most difficult thing in the world is to | Hoffsveien 17 | know how to do a thing and to watch | PO. Box 425 Skøyen | somebody else doing it wrong, without | 0213 Oslo | comment. | NORWAY | | Phone : +47 22 13 01 00 | | Direct: +47 22 13 10 03 | | Mobile: +47 909 56 963 | | ------------------------+---------------------------------------------+ ---------------------------(end of broadcast)--------------------------- TIP 4: Have you searched our list archives? http://archives.postgresql.org