Anyone interested in LUA on WinXP?

Anyone interested in LUA on WinXP?
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 Microsoft Antivirus Discussions    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Anyone interested in LUA on WinXP? Bigbruva 02-07-2006
Posted by Bigbruva on February 7, 2006, 6:35 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
If you have ever tried to make users run as "Non-Administrator" accounts on
a Windows computer you'll know that it can be a tough process! :-(

While I was researching a related problem I came across a new guide from
Microsoft that talks about the problems you will face and some of the tools
you can used to help make the process run more smoothly! I wish I had had
this about a year ago!..Anyway I thought I would post a link to it here as
it is an area that can have a significant impact on AV software!

The guide is called "Applying the Principle of Least Privilege to User
Accounts on Windows XP" and you can read it here:
http://go.microsoft.com/fwlink/?LinkId=58445

BB



Posted by Bill Sanderson on February 9, 2006, 8:35 am
If you were  Registered and logged in, you could reply and use other advanced thread options
This is an area that is getting lots of development time and attention in
Vista.

It can also be valuable in corporate settings where the set of apps that run
on a given desktop is relatively limited, so you can go through the testing
process with each of them.

And it is an interesting exercise to do on your own machine to see how
difficult it really is--for example, in XP, setting the time on the clock
requires admin access. Since that is the case, even just opening up the
clock applet to see the calendar also requires admin access. This is just
one example of some significant re-architecting that is necessary to make
this kind of change work at the OS or complex application level.

--

> If you have ever tried to make users run as "Non-Administrator" accounts
> on a Windows computer you'll know that it can be a tough process! :-(
>
> While I was researching a related problem I came across a new guide from
> Microsoft that talks about the problems you will face and some of the
> tools you can used to help make the process run more smoothly! I wish I
> had had this about a year ago!..Anyway I thought I would post a link to it
> here as it is an area that can have a significant impact on AV software!
>
> The guide is called "Applying the Principle of Least Privilege to User
> Accounts on Windows XP" and you can read it here:
> http://go.microsoft.com/fwlink/?LinkId=58445
>
> BB
>



Posted by Raymond on February 10, 2006, 3:31 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
On a related note, Visual Studio 2005 development
was showcased last year on a LUA account, not that
I'm ever going to use it that way. Still, they say you can do
web development and testing using LUA without IIS,
using just the file system. Good luck with that!



> If you have ever tried to make users run as "Non-Administrator" accounts
on
> a Windows computer you'll know that it can be a tough process! :-(
>
> While I was researching a related problem I came across a new guide from
> Microsoft that talks about the problems you will face and some of the
tools
> you can used to help make the process run more smoothly! I wish I had had
> this about a year ago!..Anyway I thought I would post a link to it here as
> it is an area that can have a significant impact on AV software!
>
> The guide is called "Applying the Principle of Least Privilege to User
> Accounts on Windows XP" and you can read it here:
> http://go.microsoft.com/fwlink/?LinkId=58445
>
> BB
>
>



Posted by Alun Jones on February 12, 2006, 1:01 am
If you were  Registered and logged in, you could reply and use other advanced thread options
>On a related note, Visual Studio 2005 development
>was showcased last year on a LUA account, not that
>I'm ever going to use it that way. Still, they say you can do
>web development and testing using LUA without IIS,
>using just the file system. Good luck with that!

You can develop using Visual Studio .NET 2003 with an LUA account. I do it
all the time at my job.

The one thing you can't do in VS 2003 is debug with an LUA account - it checks
to see if you have SeDebugPrivilege. This check isn't necessary unless you're
debugging an app that is running in a context other than your own - say, a
service app, or a device driver. For a regular application, it shouldn't be
required. Unfortunately, I know of no way (short of upgrading to VS 2005) to
remove this check from VS 2003.

You should be able to use other debuggers, such as WinDbg and ntsd, without
needing such privileges.

Developing in LUA is a _must_ - most code is executed at least once by a
developer, even if test never gets to half of the code. As a result, if you
don't catch LUA issues while developing, test will not generally help you
produce LUA-compliant code, because they will only test the usual portions of
the code.

[It's rightly noted that most of a program should be comprised of code to
handle errors and other 'exceptional' cases. As a result, most of a program
will never be run by its users - but when it is, it needs to work.]

Put briefly, you can't "test in" LUA to an application - it has to be "coded
in".

Alun.
~~~~

[Please don't email posters, if a Usenet response is appropriate.]
--
Texas Imperial Software | Find us at http://www.wftpd.com or email
23921 57th Ave SE | alun@wftpd.com.
Washington WA 98072-8661 | WFTPD, WFTPD Pro are Windows FTP servers.
Fax/Voice +1(425)807-1787 | Try our NEW client software, WFTPD Explorer.

Similar ThreadsPosted
New WinXP PRO Install - Have I got everything? June 19, 2008, 2:58 am
12-16-06 Computer, WinXP, keeps shutting down December 15, 2006, 8:48 pm
WinXP or Ubuntu Feisty? April 3, 2007, 2:46 am
WinXP, trojan hidden startup locations??? April 10, 2007, 8:47 am
*sobbing quetly* trojan in my winxp pro service pro serv. pack 1 December 10, 2007, 10:32 pm

The site map in XML format XML site map

Contact Us | Privacy Policy