To improve Windows Server I suggest you ...

SeShutdownPrivelege, SeUndockPrivelege, and SeTimeZonePrivelege not added to Administrators Group... only for Built-in Admin

SeShutdownPrivelege, SeUndockPrivelege, and SeTimeZonePrivelege are not added to Administrators Group... only for Built-in Admin. This makes it so setting the timezone via the timedate.cpl in Server Core impossible if logged in as Domain Admin. This also makes ExitWindowsEx function in MSVC unusable on 2019.

Previously, these worked on 2016. A workaround is to add the user (or users group) account via the Security Policy for User Rights Assessment in gpedit.msc.

5 votes
Sign in
(thinking…)
Sign in with: Facebook Google
Signed in as (Sign out)

We’ll send you updates on this idea

Frank Sapone shared this idea  ·   ·  Flag idea as inappropriate…  ·  Admin →

0 comments

Sign in
(thinking…)
Sign in with: Facebook Google
Signed in as (Sign out)
Submitting...

Feedback and Knowledge Base