Dropping program permissions from the cmd line

NutJob

Came across this on MSDN so for those people who still arnt using firefox.

Neat code though.


http://msdn.microsoft.com/library/?url=/library/en-us/dncode/html/secure11152004.asp

Martyr

nice,it should be made default for all client applications accessing the internet!
I wonder is there anyway around it though.

Cake Fiend

Average Joe wrote:

nice,it should be made default for all client applications accessing the internet!

Or what might be a better idea would be for new accounts to be non-administrative by default in the first place...

Hopefully they'll get that part fixed in Vista.

Capt'n Midnight

couldn't you just use RUNAS to start a CMD prompt with GUEST access ?

:Give guest a random password and then use it (if the real world you'd disable/rename)
set p=%random%
net user GUEST %p%
RUNAS /user:GUEST %p% cmd

or
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/runas.mspx?mfr=true
it's also got a /trustlevel

NutJob

I have Guest disabled by group policy (work):-)

And for home use i have firefox and linux so im not too worrried


Iv seen the vista betas it wont protect users from themselves but not much will.

Martyr

yes, i mean have the actual code incorporated into an internet application, by default.