Hello Everyone,


I had this doubt about NT(workstation) proccess,does NT have process sysmon,sysman running and can a user with least options access these processes,or are these only accessable to the admin.And a program like prcview.exe can't kill it.

???

Thanks - nyx

Hello nyx !

Why don't you try it out? Just create a Guest user and test it. And if you don't have NT, I'm sure you know someone on whose computer you don't have Admin privileges.

Normally a Guest isn't able to do such things. Have you ever wondered what the CreateProcessAsUser function is used for?

DakienDX thanks of the reply,well I'm just a newbie in many areas just learning things in programming,Well Ilooked into the API,and I tried killing those process but it did'nt work so I assume that a user ca'nt access it. Any idea where to read more about these

Thanks -nyx

Please read "Inside Windows NT" or "Inside Windows 2000" or MSDN Security API docs.