Search found 4 matches

by ThomasW
Sat Dec 30, 2006 1:27 pm
Forum: madSecurity
Topic: Accessing SystemAccount files and folders.
Replies: 6
Views: 18809

As I said, LogonUser usually only works inside of system/service processes, unfortunately. And I ussually trust people who knows their stuff, I guess I'll run for your recommended approach then (Chaning owner and adding privileges), however I think I can make a solution that would solve the gracefu...
by ThomasW
Sat Dec 30, 2006 2:22 am
Forum: madSecurity
Topic: Accessing SystemAccount files and folders.
Replies: 6
Views: 18809

Alternatively you could store the current ownership and DACL of the folder, take ownership, set a new DACL, and finally undo all your changes. I believe you can also restore the old ownership. This all should be doable by using madSecurity I think. madSecurity wouldn't help with the first two (&quo...
by ThomasW
Thu Dec 28, 2006 11:01 pm
Forum: madSecurity
Topic: Accessing SystemAccount files and folders.
Replies: 6
Views: 18809

My research so far.

I understand that it is possible to impersonate another account, ussually it's done with a thread (using the Security Descriptor) when a system service needs to impersonate a user. However, My need is opposite, a user scans his system, but a thread needs to be spawned impersonating the System accoun...
by ThomasW
Thu Dec 28, 2006 4:28 am
Forum: madSecurity
Topic: Accessing SystemAccount files and folders.
Replies: 6
Views: 18809

Accessing SystemAccount files and folders.

I have dedicated my sparetime at a freeware project concerning a scanner able to scan all the files on all fixed drives, however: I need to access the 'System Volume Information' folder (if exists), which is by default only made available to the System account. I know it is possible to take ownershi...