Parental Controls as an SRP for Windows 7 Home users
5 posters
Page 3 of 3
Page 3 of 3 • 1, 2, 3
Re: Parental Controls as an SRP for Windows 7 Home users
ssj100 wrote:C:\Windows\Tasks directory is not the only one. Check this out:Troy45 wrote:It seems the C:\Windows\Tasks directory will let you execute programs such as Process Explorer. It's not restricted. hmm
http://www.wilderssecurity.com/showpost.php?p=1658981&postcount=31
Ok thanks will be reading more about this and do more testing.
Troy45- New Member
- Posts : 4
Join date : 2011-01-18
Re: Parental Controls as an SRP for Windows 7 Home users
Yes, it can get quite confusing. Keep in mind that Windows also has User allow/deny file/folder permissions, so there are almost always some exceptions.
Re: Parental Controls as an SRP for Windows 7 Home users
Troy45 wrote:It seems the C:\Windows\Tasks directory will let you execute programs such as Process Explorer. It's not restricted. hmm
That's right. Just tried to launch Process Explorer from C:\Windows\Tasks, but instead of the usual Parental Controls notification, I get this:ssj100 wrote:Yes, it can get quite confusing. Keep in mind that Windows also has User allow/deny file/folder permissions, so there are almost always some exceptions.
Meaning: "Access denied to device, path or file. You may not have the right to access this object" (or something of that nature).
That's because I placed that object into "Tasks" as the Admininstrator. But if I put that object into "Tasks" as a user, I can still execute it. Besides, this applies to ANY program, not only to the ones that were already whitelisted in other locations.
Paul
p2u- Valued Member
- Posts : 211
Join date : 2010-12-14
Re: Parental Controls as an SRP for Windows 7 Home users
This is why it's important to block execution from those "14 exceptions" with additional SRP or AppLocker rules. This applies for Windows 7, although I suspect it's similar for Vista.
For the directories to block on Windows XP, refer to my security setup/approach post - there are 7 exceptions that I identified.
For the directories to block on Windows XP, refer to my security setup/approach post - there are 7 exceptions that I identified.
Re: Parental Controls as an SRP for Windows 7 Home users
Bad news. My Vista keeps setting the "0" value back after a couple of minutes or so, even when the Administrator is the owner of the object. Besides, dll's are not blocked anyway; additionally only .lnk. Checked with Robin Keir's Firehole leaktest.Troy45 wrote:HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers TransparentEnabled is set at 2.
Paul
p2u- Valued Member
- Posts : 211
Join date : 2010-12-14
Page 3 of 3 • 1, 2, 3
Similar topics
» Win7 network settings: Home vs. work/public
» Windows 7 and SUA
» "How to disable the Autorun functionality in Windows" (Windows XP)
» Windows 7 Firewall Control (for Windows XP)
» Securing your home banking session
» Windows 7 and SUA
» "How to disable the Autorun functionality in Windows" (Windows XP)
» Windows 7 Firewall Control (for Windows XP)
» Securing your home banking session
Page 3 of 3
Permissions in this forum:
You cannot reply to topics in this forum
|
|