Print Page | Close Window

Debug privileges needed

Printed From: Sysinternals
Category: Sysinternals Utilities
Forum Name: Filemon
Forum Discription: Filemon questions, suggestions, comments and bug reports
URL: http://forum.sysinternals.com/forum_posts.asp?TID=1264
Printed Date: 20 November 2009 at 10:26pm


Topic: Debug privileges needed
Posted By: chrisrr
Subject: Debug privileges needed
Date Posted: 14 September 2005 at 9:45am

Hi,

I'm trying to use filemon on my home pc (XP Home Edition, Service Pack 2).  I get the message that "your account does not have the Debug Programs privilege, which is required to run Filemon."

I am logged in as a Computer Administrator.  Is "debug programs" an accessible option in XP Home Edition, & how do I turn it on?

Thanks for your time!



-------------
Chris RR


Replies:
Posted By: fimmwolf
Date Posted: 18 September 2005 at 6:23am

How to enable debug privileges for a user account  (xp pro)

In the run box type: secpol.msc then click ok

expand "Local Policies"

click the "User Rights Assignments" folder

On the right hand screen double click "Debug Programs"

Click the "Add User or Group" button

Click the "Advanced" button

Click the "find now" button

select your "user logon name" and then click the "ok" button

click the "ok" button 2 more times

 

Important: your user account "token" is updated when you first login.

This means that your debug privileges won't take affect until you log off and then log back in again, or reboot.

(whichever you prefer)


xp home edition doesn't have secpol.msc


So in order to permit the user the "debug programs" privilege you need to download a command line utility called ntrights.exe, which is part of the 2003 resource kit tools.


Those resource kit tools can be downloaded free from Microsoft here: 
http://www.microsoft.com/downloads/details.aspx?FamilyID=9d4 67a69-57ff-4ae7-96ee-b18c4790cffd&displaylang=en


For more information on ntrights and it's syntax go here: 
http://www.ss64.com/nt/ntrights.html


I believe the basic command will be something like this:
ntrights +u jdoe +r SeDebugPrivilege

(which assumes a user account called jdoe exists)

 



-------------
"Just because your'e paranoid, don't mean they're not after you"

Posted By: kyrka
Date Posted: 23 February 2006 at 11:26am

On 18 September 2005 at 6:23am fimmwolf said:
"Important: your user account "token" is updated when you first login.

This means that your debug privileges won't take affect until you log off and then log back in again, or reboot.

(whichever you prefer)"

You are half right... changes to local security policy REQUIRE A REBOOT - merely logging off and on won't get you there.
Kyrka

Posted By: elec29a
Date Posted: 24 May 2006 at 6:54am
You can use the Run As User command to avoid the temp reboot.. 

Posted By: lohh
Date Posted: 04 August 2006 at 7:03am
I'm getting this problem on Windows Vista beta 5384. I've tried the steps above and they don't seem to make any difference i.e. adding "Debug Programs" privileges to my user login doesn't help, even if I reboot.

The only way I can get FileMon to run is by right clicking and "Run as Administrator". That's OK for FileMon but for other programs that run at startup / as a service / as a right click option it's no good (e.g. http://ccollomb.free.fr/unlocker/)

Posted By: EP_X0FF
Date Posted: 05 August 2006 at 7:51am
Originally posted by lohh


I'm getting this problem on Windows Vista beta 5384. I've tried the steps above and they don't seem to make any difference i.e. adding "Debug Programs" privileges to my user login doesn't help, even if I reboot.The only way I can get FileMon to run is by right clicking and "Run as Administrator". That's OK for FileMon but for other programs that run at startup / as a service / as a right click option it's no good (e.g. http://ccollomb.free.fr/unlocker/)

Maybe its time to wait for Vista release?? Why you think that every software should work on beta version of operation system without errors?

-------------
Ring0 - the source of inspiration


Print Page | Close Window