Just started to review this book written by Russel Smith. This book includes tips on Solving Privilege Problems with the Application Compatibility Toolkit, UAC, Software Distribution, Deploying ActiveX Controls and Provisioning Apps on Secure Desktop using RDS, App-V and Med-V.
Adobe is working towards implementing a Sandbox technology ‘Protected Mode’ for its reader products. Protected Mode is based on Microsoft’s Practical Windows Sandboxing technique. Adobe has been working closely with Microsoft Office security team and the Chrome team at Google to leverage their sandboxing knowledge and experience.
In this Fixing Application Compatibility article, we will look at how to create a File redirection and make the application point to a new File Path Directory instead of the old one.The CorrectFilePaths Shim along with Command line is used for this purpose.
During Develop / Deploy phase of an application, its very important to test the functionality of an app as a Standard User. Especially when the organization has a locked-down environment. Standard User Analyzer tool exactly helps you in this purpose!
UAC is a security feature that was firstly presented in Windows Vista., and now in Windows 7. UAC enables the user to run as standard user, and elevate only when an administrative operation is performed. Here is a 10 mins video which explains on the basics of UAC and its improvements in Windows 7. Also… Continue reading User Account Control (UAC) Basics and Security Features in Windows 7
When an administrator user logs on to a Windows Vista computer, two access tokens are created: a filtered standard user access token, and a full administrator access token. Instead of launching the desktop (Explorer.exe) with the administrator’s access token, the standard user access token is used. All child processes inherit from this initial launch of… Continue reading How does User Account Control (UAC) work in Windows 7?
The easiest way to simulate the UAC is to install an MSI from an elevated command line. In Vista choose to run the command prompt as Administrator. Then install an MSI. You can flag an MSI, by modifying the WordCount in the Summary Information Stream, so that it does not automatically require elevation during an… Continue reading How to Test Application MSI Packages for UAC
The basics of this feature is explained in the article Folder Virtualization Concepts in Windows Vista. Impact in MSI Packaging Files in a registry key can be found twice in your installation. Especially if the application has to be launched to customize options and settings. Possible Work-around During Setup-Capture: Virtualized resources needs to be merged… Continue reading Windows 7 – File and Registry Redirection : Impact on MSI Packaging