Home
22 items | 153 visits
-
Designing Applications to Run at a Low Integrity Level
-
By default, child processes inherit the integrity level of their parent process. To start a low-integrity process, you must start a new child process with a low-integrity access token using the function CreateProcessAsUser. To start a low-integrity process from a medium-integrity process, you must start the new process explicitly as low integrity.
-
This type of Save As scenario is an example of how Protected Mode Internet Explorer uses its own broker process to handle saving a Web page somewhere in the user’s profile.
-
-
Running Vista Every Day! - B.I.S.S. Forums
-
Internet Explorer’s protected mode is implemented using the IL mechanism. The iexplore.exe process runs at Low IL and, in a system with default configuration, can only write to %USERPROFILE%\AppData\LocalLow and HKCU\Software\AppDataLow because all other objects have higher ILs (usually Medium).
-
-
浅析vista下的ie7保护模式 - COM&&ATL - CSDNBlog
-
在ie进程中启动一个新进程时会有一个对话框弹出提示是否允许运行该程序，如果你选择的不再对此
程序显示此警告->点击允许的话，ie会在注册表HKCU中添加一项ElevationPolicy,以后就不会再有提示了.
如果你提前把你的相关信息加入到ElevationPolicy下,那么它将不会影响我们干任何事情.hoho!
-
-
了解并运行 Internet Explorer 保护模式
-
Windows Vista 中所有文件和注册表项的默认完整性级别均为“中”。
-
低完整性进程可以创建并写入注册表的低完整性子项，例如 HKEY_CURRENT_USER\Software\LowRegistry。
- 1 more annotations...
-
-
Protected Mode in Vista IE7 - Windows Server - Networking
-
Add-in writers also can create their own broker processes if needed for custom elevated operations.
-
-
IEBlog : New API Smoothes Extension Development in Protected Mode
-
However, some extensions require access to medium or high integrity objects. Because of this, extensions can be configured during installation to run with a higher privilege level by creating an elevation policy that is associated with them in the registry.
-
-
Understanding and Working in Protected Mode Internet Explorer
-
Note that a high integrity process with administrator privileges will launch a high integrity IE process with Protected mode off. If you want to launch Protected mode from your high integrity process then first create a medium integrity process, which will launch your high integrity process and IE.
-
-
安全性: 深入了解 Windows Vista 用户帐户控制 -- TechNet Magazine, June 2007
-
UAC 旨在使用户能够使用标准用户权限（而不是管理权限）运行。
-
标准用户帐户不具备 %ProgramFiles% 目录或 HKEY_LOCAL_MACHINE\Software 的写访问权限，但是因为多数 Windows 系统都是单用户的，并且在 Windows Vista 之前多数用户都是管理员，所以错误地将用户数据和设置保存到这些位置的应用程序仍能工作。
- 2 more annotations...
-
-
LIVE记事本: 什么是ieuser.exe
-
IE7保护模式使用了Windows Vista的完整性机制，使用IE在保护模式下，其进程的IL级别是“低”，也就是除了IL级别为低的Internet临时文件夹可以被写入，磁盘中其他任何文件、文件夹和注册表都不允许写入。这无视登录用户的权限级别。这保证了有害的Internet程序、代码不会对系统造成伤害。
-
-
Windows Vista博客 : [Windows Vista]安全桌面凭什么那么安全？
-
究其本质，安全桌面，也叫做Winlogon桌面，实际上是WinSta0窗口站里默认具有的三个桌面之一。另外两个桌面，一个是Default桌面，也就是用户桌面，就是我们平时登录后所在的桌面，还有一个是屏保桌面（且不去管它）。
-
在安全桌面上，只有以SYSTEM权限运行的进程，才可以读取安全桌面上的内容；其他进程呢，哪怕是以Administrators身份运行（够大了吧），还是不行。
-
List Comments
(0)
List Info
Sponsored Links
Ads by Google