named events created in kernel mode


In KB Q228785 it is said that “User applications running in a
non-administrator account will fail (ERROR_ACCESS_DENIED) to open a
named event that has been created in a device driver in the system
process context”.

What about users with administrative privileges and what about
services? Will my service (as soon as it runs in “SYSTEM” account) be
able to open such named events?

Roman Kudinov