question: user accounts

[vinifera]

which one has highest priviledge

System or TrustedInstaller ?

 

and is there a way to "put" on right click context menu an option

to take ownership for files/folders FROM TrustedInstaller ?

[351837]

which one has highest priviledge

System or TrustedInstaller ?

 

and is there a way to "put" on right click context menu an option

to take ownership for files/folders FROM TrustedInstaller ?

 

Not sure about first question, IMO TrustedInstaller.

 

Check this out http://www.askvg.com/add-restore-ownership-to-trustedinstaller-option-in-files-and-folders-context-menu-in-windows-vista-7-and-8/

[Tripredacus]

I am going to guess that System does.

A process running under the local system account can exercise the take-ownership privilege to gain access.

- Windows Internals Part 1, 6th Edition.

[vinifera]

I already have "take ownership"

but it clashes as trusted installer doesn't allow me changes or deletion even if

take ownership was/is applied

 

sure I can do then things from PE but for "on the fly" changes its annoying

[351837]

Take Ownership > copy to desktop > make changes > rename original one (.old or .bak) > paste "new" one,  always worked for me.

[Tripredacus]

If I am to understand the quote correctly, it is that being a child of the System account is what allowed another account to take ownership of something. That may mean that if you were to set deny permissions for the System account on an object, Trusted Installer may not be able to take ownership. I may be wrong, as the last time I did something like that was in Windows XP. I took ownership of a file, then removed all permissions except Read for the System account. The item in question was not part of the OS, however, it was a file associated with a virus that I had difficulty in removing.