I'm learning how the assignment of Bypass traverse checking[BTC] User Right[UR] on Vista is different from other OSs like Win 2003. The warning in gpedit.msc points to http://go.microsoft.com/fwlink/?LinkId=17925. On browsing to that address, I get re-directed to http://support.microsoft.com/kb/823659 This article says that assigning BTC to no accounts is a risky configuration, but the article applies to OSs other than Vista [it seems logical that it also applies to Vista]. There is no change in working of BTC user right for Vista that i can locate. Why is Vista not included under OSs in 'Applies to' section? Is there any site specific for User Rights working on Vista? I want my Vista system to be secure to the greatest extent while being connected to a domain. Why does Vista assign the accounts: Local Service & Network Service, the BTC UR, when I set the User right in gpedit.msc so that no accounts are assigned the BTC UR?

http://technet.microsoft.com/en-us/library/cc748911.aspx has a large section on user rights in Vista. Local Service and Network Service might be getting added back in by a Windows Service that requires traverse checking.