Skip to main content

Windows Vista: Kernel Changes - Has any body seen Gina and wh...

Popularity Report

Total Popularity Score: 0

Loading...
Loading...
Loading...
Loading...
Loading...
Loading...

Rank

Bookmark History

Saved by 1 people (0 private), first by anonymouse user on 2008-05-13


Public Sticky notes

At logon, the LSASS creates both an Administrator and Limited User Account (LUA) version of the Administrator token and links both of them to the logon session. The userinit process (which is the first process created by winlogon) is created with the LUA token.

Highlighted by fmavituna

  • In its manifest file
  • In the system’s application compatibility database
  • Heuristic installer detection
  • User explicitly asks for elevation
  • Highlighted by fmavituna

  • Low - Protected-mode IE
  • Medium - LUA processes
  • High - Elevated processes
  • System - System processes
  • Highlighted by fmavituna

    non-process object

    Highlighted by fmavituna

    Readers (1)