SeDebugPrivilege

Is there any relatively straightforward way for a user on a user level account to gain SeDebugPrivilege without an administrator giving it to him?

In local security policies -> local policies -> user rights assignments -> Debug programs: add the user in question...

Ammo

i don't think non-administrators really have the rights to edit what rights they have. even if it is something minute, it would kind of defeat the purpose of assigning and restricting many rights to begin with.

but user level accounts don't have access to the local security policies

Oh, sorry, didn't read it right...

In that case, I don't think it's feasable... like spyrul said, it would be pretty much self-defeating...

Ammo