Corinna Vinschen wrote: > > Cool. Another interesting option could be to remove the domain admins > group as well, if the user is a domain user and, of course, removing > any single user right, similar to the "capsh" tool under SELinux. >
Yes, makes sense. > I'm just not sure if that tool should be part of the Cygwin package or > a package of its own right. I'm leaning towards the latter choice. > > ... or add it to the cygutils package ? Is there any tool to print the info provided by GetTokenInformation() ? I have a preliminary version of such a tool and can contribute it later if desired. Christian
