This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(182.40000000000003, 18%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJP%3C/text%3E%3C/svg%3E)
Hi,
I'm currently trying to make a mimic of chown by building a chown.exe using C language.
When running my app from command prompt as Administrator , it runs fine.
But when running it from "normal command prompt , it fails with AdjustTokenPrivileges Error Code 1300 when trying to set SE_RESTORE_NAME and SE_TAKE_OWNERSHIP_NAME privileges.
Despite the fact I added , in global policies, ability to take file ownership , the process has only this privileges :
PrivilegeCount(5)
name (SeShutdownPrivilege) Attributes(0)
name (SeChangeNotifyPrivilege) Attributes(3)
name (SeUndockPrivilege) Attributes(0)
name (SeIncreaseWorkingSetPrivilege) Attributes(0)
name (SeTimeZonePrivilege) Attributes(0)
Did I misunderstand something to be able to change owner o a file by this way ?
Thx for help
J.P.
Error Code 1300 ERROR_NOT_ALL_ASSIGNED: The token does not have one or more of the privileges specified in the NewState parameter.
The AdjustTokenPrivileges function enables or disables privileges in the specified access token. As far as I'm concerned you couldn't add a new privilege, you just could enable or disable the already existing privileges.
When UAC is enabled a process created by a user account that is a member of the Administrators group receives a filtered token without Administrator privileges. An elevated process that is running as Administrator will have the Administrator privileges in its token.
Hi,
Thx for answer.
Wha'ts strange to me ( maybe cos I don't know enough how it's handled) is that by clicking on Properties of the file , I'am able to do what I want (.e. ownership) change ) without elevated anything.
J.P.
P.S. If I try to elevate the process via Win32 API , which privileges must have the usrer running the .exe to be allowed to elevate the Process ?
Wha'ts strange to me ( maybe cos I don't know enough how it's handled) is that by clicking on Properties of the file , I'am able to do what I want (.e. ownership) change ) without elevated anything.
A lot depends on what permissions are granted by the security descriptor of the file. For example, If it grants Full Control to groups/users then they would have the right to Change Ownership.
If I try to elevate the process via Win32 API , which privileges must have the usrer running the .exe to be allowed to elevate the Process ?
Ordinarily the account being used would be a member of the Administrators group. Is that what you are doing?
Thxfor answer .
Yes , it's I want to do.
I'm trying to change ownership of a file belonging to an user part of Administrator groups for a standard user .
Then returns 0x1307 error : This security ID may not be assigned as the owner of this object.
For information , PSID of the targetted owner was got via LookupAccountName() .
As additionnal tests :