Re: Write access denied when limited privilege.

From: Wiebe Vos (post@foxware.nl)
Date: 06/02/02 

From: "Wiebe Vos" <post@foxware.nl>
Date: Sun, 2 Jun 2002 15:56:21 +0200

Thank you for you response,

I have to clarify my problem.
The denied (write) access does apply to the writing of ANY file in the
directory
in which the deployed program is installed. (This directory is created
during installation).
There is no such thing done as writing .exe files or writing in a systems
directory.

Wiebe G. Vos

Bryce <bryceATmiltonDOTcom> schreef in berichtnieuws
O#vUP3bCCHA.2540@tkmsftngp05...
> Note that writing to Program Files is a classic logo-blocking issue,
if
> you ever wanted to obtain the "Made for XP" logo. The logo guidelines
offer
> a lot of valuable design and testing tips even if you don't go for the
logo:
> http://www.microsoft.com/winlogo/software/
>
> -Bryce
>
> "Bryce" <bryceATmiltonDOTcom> wrote in message
> news:OixuEwbCCHA.2052@tkmsftngp02...
> > That's the default ACL'ing for any directory under Program Files and
> > there are many good security reasons for this (it's a simple way to
> prevent
> > limited users from tampering with applications that could be run by the
> > admin later - this is also why limited users are unable to create files
at
> > the root of the boot drive with names like "program files.exe") -
> > Your app should not be attempting to write to HKLM, %WinDir%, or
> Program
> > Files at run time. Any example of such behavior is a bug or design flaw
> in
> > your app that you need to fix. Write to the current user's %temp% or
> > %appdata% folders instead.
> >
> > -Bryce
>
>
>

Relevant Pages

  • Re: Modify VSTO addins manifest to work it as Invoker
    ... In almost all cases on Vista a program has no permissions to write to the Program Files hierarchy. ... It's also considered to be not a best practice to do that even where the OS doesn't prevent writing there. ... my addin writes the trace in the application directory. ...
    (microsoft.public.outlook.program_vba)
  • Re: Xupitor
    ... > Is there a way to block Xupiter? ... Or anything I can do to stop it writing ... > itself to my program files? ... Practice Voodoo cursing on the Yomtombian family and hope it's effective? ...
    (alt.computer.security)
  • Re: Xupitor
    ... > Is there a way to block Xupitor? ... Or anything I can do to stop it writing ... > itself to my program files? ... > Sim Fan ...
    (alt.computer.security)
  • Re: Display contents of text file in the Browser
    ... It sounds like your app is attempting to read from the file at the same time ... that it is writing to it, ... process and attempting to read the file and display it at the same time. ... memory, and return that string to the client, while launching a separate ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Make a "LyX" logo without using Lyx
    ... print the "LaTeX" logo? ... I am writing a document with LaTeX, not Lyx, ...
    (comp.text.tex)