Why deadlinecommand.exe needs highest system privilege?

Deadline
1

Hi,

We have Deadline Repository (10.0.4) running on windows server.
All processes are running under a restricted service account, without admin rights. Everything is setup properly and all is working fine.

However, in the Windows Events Log we see that deadlinecommand.exe continuously is trying to “grab” SeTcbPrivilege.

This privilege identifies its holder as part of the trusted computer base. This user right allows a process to impersonate any user without authentication. The process can therefore gain access to the same local resources as that user.

Microsoft Info

What’s interesting is that the older versions of Deadline (10.0.2 that we had before) did not generate that warning. But as we updated to 10.0.4 - this started happening.

Anyone has any idea on this?

2

No clue why it only started with the update but I assume it wants those privileges for the render as user and similar features. I further assume it’s fine to deny those as long as you don’t use those features.