unpermitted installation

unpermitted installation

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
unpermitted installation Asperitas 11-29-2005
Posted by =?Utf-8?B?QXNwZXJpdGFz?= on November 29, 2005, 10:14 am
If you were  Registered and logged in, you could reply and use other advanced thread options
here is someone who installed a dutch goverment program on our terminal
server, but the point is that he has no writing rights on C:, nor can he see
it in My Computer (he's a normal user, not an admin or superuser). If he
enters "C:\" in the address bar the message he gets
is "access denied". When we found out we tried it ourselves, with an account
that has no writing permissions on C: and we were unhappily surprised when we
found out that we could install it without any problems! Then we tried the
same with a program that used unwise.exe and there was no way that we could
get it installed

Can someone tell me how this is possible, and how can I prevent it?

it's about this program:
http://www.belastingdienst.nl/home/download/1035.html (on the bottom)

Posted by Steven L Umbach on November 29, 2005, 2:52 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
When you examine the owner of the folder and files who is shown - the
limited user account or administrators?? Also double check the permissions
on subfolders and special permissions on the drive folder under advanced to
see exactly what special permissions the user or group has such as for
subfolders only, etc. --- Steve


> here is someone who installed a dutch goverment program on our terminal
> server, but the point is that he has no writing rights on C:, nor can he
> see
> it in My Computer (he's a normal user, not an admin or superuser). If he
> enters "C:\" in the address bar the message he gets
> is "access denied". When we found out we tried it ourselves, with an
> account
> that has no writing permissions on C: and we were unhappily surprised when
> we
> found out that we could install it without any problems! Then we tried the
> same with a program that used unwise.exe and there was no way that we
> could
> get it installed
>
> Can someone tell me how this is possible, and how can I prevent it?
>
> it's about this program:
> http://www.belastingdienst.nl/home/download/1035.html (on the bottom)



Posted by Roger Abell [MVP] on November 30, 2005, 1:06 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Well, I do not read Dutch, but I could tell that I would need to analyze
and exe install file to attempt actually answering you.
However, I must ask - why do you believe that the limited (normal) user
account has not write access on c: ?? If this were fully true then the
account probably would be unable to log in. Are you saying that the
account is disallowed all write access to their profile ???

Installation can be set to be "for all accounts", "for the current user",
or to allow selection between the two. The first normally requires that
an admin be used for the installation. The second can be done by the
user for whom the application is to be available, and requires that the
application only make use of capabilities allowed to the user (ex. does
not try to define new accounts, change network config, etc. but instead
just does normal user things).

Perhaps you are overlooking some of what the account you used is able
to write, and the install was of the second type.

--
Roger Abell
Microsoft MVP (Windows Server : Security)
MCDBA, MCSE W2k3+W2k+Nt4
> here is someone who installed a dutch goverment program on our terminal
> server, but the point is that he has no writing rights on C:, nor can he
> see
> it in My Computer (he's a normal user, not an admin or superuser). If he
> enters "C:\" in the address bar the message he gets
> is "access denied". When we found out we tried it ourselves, with an
> account
> that has no writing permissions on C: and we were unhappily surprised when
> we
> found out that we could install it without any problems! Then we tried the
> same with a program that used unwise.exe and there was no way that we
> could
> get it installed
>
> Can someone tell me how this is possible, and how can I prevent it?
>
> it's about this program:
> http://www.belastingdienst.nl/home/download/1035.html (on the bottom)



Similar ThreadsPosted
AD CS 08 - Installation UI question: January 31, 2008, 4:57 pm
Program installation history August 26, 2005, 4:36 pm
How can I automate Certificate Installation ... ! January 18, 2006, 11:29 am
Windows Defender Installation May 27, 2006, 11:59 am
Silent certificate installation February 21, 2007, 4:02 pm
Help PKI installation - lots of questions ! December 27, 2007, 9:55 am
Problems with Forefront installation. May 15, 2008, 2:54 pm
Product Activation & re-installation July 20, 2008, 12:03 pm
Re-installation advice - Stefan Kanthak February 13, 2006, 9:35 am
popup right after security download installation. August 9, 2006, 1:54 am

The site map in XML format XML site map

Contact Us | Privacy Policy