Is SeDebugPrivilege permission is required for the UD discovery ?

  • KM03172418
  • 05-Jun-2018
  • 05-Jun-2018

Summary

The SeDebugPrivilege permission is not required for Universal Discovery and it doesn't mandate it.

Question

In Window NT and Win2K , we have specific previlege by name SeDebugPrivilege. This gives the access into the running process by opening the handle for the running process.
This kind of permission is not required for UD discovery credentails.  
 

Answer

UD doesn't require such permisison. This specific permission is windows specifc nothing to do with the UD discovery.

By having this specific permission user can call the OpenProcess() Win32 API to obtain a handle with PROCESS_ALL_ACCESS.