Parental Controls as an SRP for Windows 7 Home users

Page 3 of 3 Previous  1, 2, 3

View previous topic View next topic Go down

Re: Parental Controls as an SRP for Windows 7 Home users

Post by Troy45 on 19/1/2011, 12:04

ssj100 wrote:
Troy45 wrote:It seems the C:\Windows\Tasks directory will let you execute programs such as Process Explorer. It's not restricted. hmm
C:\Windows\Tasks directory is not the only one. Check this out:
http://www.wilderssecurity.com/showpost.php?p=1658981&postcount=31



Ok thanks will be reading more about this and do more testing. Smile

Troy45
New Member
New Member

Posts : 4
Join date : 2011-01-18

View user profile

Back to top Go down

Re: Parental Controls as an SRP for Windows 7 Home users

Post by ssj100 on 19/1/2011, 12:09

Yes, it can get quite confusing. Keep in mind that Windows also has User allow/deny file/folder permissions, so there are almost always some exceptions.

_________________
Sandboxie + LUA + SRP + DEP + SuRun
Windows Firewall + NAT Router + IPSec (on-demand)
VirtualBox (on-demand)
Drive SnapShot (on-demand)
avatar
ssj100
Administrator
Administrator

Posts : 1389
Join date : 2010-04-14

View user profile http://ssj100.fullsubject.com

Back to top Go down

Re: Parental Controls as an SRP for Windows 7 Home users

Post by p2u on 19/1/2011, 12:59

Troy45 wrote:It seems the C:\Windows\Tasks directory will let you execute programs such as Process Explorer. It's not restricted. hmm
ssj100 wrote:Yes, it can get quite confusing. Keep in mind that Windows also has User allow/deny file/folder permissions, so there are almost always some exceptions.
That's right. Just tried to launch Process Explorer from C:\Windows\Tasks, but instead of the usual Parental Controls notification, I get this:



Meaning: "Access denied to device, path or file. You may not have the right to access this object" (or something of that nature).
That's because I placed that object into "Tasks" as the Admininstrator. But if I put that object into "Tasks" as a user, I can still execute it. Besides, this applies to ANY program, not only to the ones that were already whitelisted in other locations. Sad

Paul

p2u
Valued Member
Valued Member

Posts : 211
Join date : 2010-12-14

View user profile

Back to top Go down

Re: Parental Controls as an SRP for Windows 7 Home users

Post by ssj100 on 20/1/2011, 10:15

This is why it's important to block execution from those "14 exceptions" with additional SRP or AppLocker rules. This applies for Windows 7, although I suspect it's similar for Vista.

For the directories to block on Windows XP, refer to my security setup/approach post - there are 7 exceptions that I identified.

_________________
Sandboxie + LUA + SRP + DEP + SuRun
Windows Firewall + NAT Router + IPSec (on-demand)
VirtualBox (on-demand)
Drive SnapShot (on-demand)
avatar
ssj100
Administrator
Administrator

Posts : 1389
Join date : 2010-04-14

View user profile http://ssj100.fullsubject.com

Back to top Go down

Re: Parental Controls as an SRP for Windows 7 Home users

Post by p2u on 26/1/2011, 23:45

Troy45 wrote:HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers TransparentEnabled is set at 2.
Bad news. My Vista keeps setting the "0" value back after a couple of minutes or so, even when the Administrator is the owner of the object. Besides, dll's are not blocked anyway; additionally only .lnk. Checked with Robin Keir's Firehole leaktest.

Paul

p2u
Valued Member
Valued Member

Posts : 211
Join date : 2010-12-14

View user profile

Back to top Go down

Re: Parental Controls as an SRP for Windows 7 Home users

Post by Sponsored content


Sponsored content


Back to top Go down

Page 3 of 3 Previous  1, 2, 3

View previous topic View next topic Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum