Can someone explain to me why do I need this permission set , instead of creating group with relevant permissions for a job??
The NSA and MS CC evaluation recommend giving no one this permission , although the default is administrators
I suspecdt I don't understand the propose of this setting
Thanks in advance
Sharon

Search the XP threats and countermeasures doc for trusted for delegation.
It will answer your question.
Basically someone could abuse the right to impersonate others.

Threats and Countermeasures: Security Settings in Windows Server 2003 and
Windows XP
http://www.microsoft.com/downloads/details.aspx?FamilyId=1B6ACF93-147A-4481-
9346-F93A4081EEA8&displaylang=en

What Administrators Should Tell Their Users about Passwords
http://www.microsoft.com/technet/security/readiness/content/documents/passwo
rd_tips_for_users.doc

What Administrators Should Know About Passwords
http://www.microsoft.com/technet/security/readiness/content/documents/passwo
rd_tips_for_administrators.doc

Windows 2000 Security Hardening Guide
http://www.microsoft.com/downloads/details.aspx?FamilyID=15e83186-a2c8-4c8f-
a9d0-a0201f639a56&DisplayLang=en

Windows Server 2003 Security Guide
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/
prodtech/win2003/w2003hg/sgch00.asp

Microsoft Windows XP Security Guide Overview
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/
prodtech/winclnt/secwinxp/default.asp


IBTerry [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.