Dropping program permissions from the cmd line

NutJob · 30-05-2006 03:24PM #1

Came across this on MSDN so for those people who still arnt using firefox.

Neat code though.

http://msdn.microsoft.com/library/?url=/library/en-us/dncode/html/secure11152004.asp

Martyr · 30-05-2006 04:55PM

nice,it should be made default for all client applications accessing the internet!
I wonder is there anyway around it though.

Cake Fiend · 01-06-2006 07:39PM

Average Joe wrote:

nice,it should be made default for all client applications accessing the internet!

Or what might be a better idea would be for new accounts to be non-administrative by default in the first place...

Hopefully they'll get that part fixed in Vista.

Capt'n Midnight · 01-06-2006 11:20PM

couldn't you just use RUNAS to start a CMD prompt with GUEST access ?

:Give guest a random password and then use it (if the real world you'd disable/rename)
set p=%random%
net user GUEST %p%
RUNAS /user:GUEST %p% cmd

or
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/runas.mspx?mfr=true
it's also got a /trustlevel

NutJob · 02-06-2006 01:10AM

I have Guest disabled by group policy (work):-)

And for home use i have firefox and linux so im not too worrried

Iv seen the vista betas it wont protect users from themselves but not much will.

Martyr · 02-06-2006 01:44PM

yes, i mean have the actual code incorporated into an internet application, by default.

Dropping program permissions from the cmd line

Comments