Forums
New posts
Search forums
News
Security News
Technology News
Giveaways
Giveaways, Promotions and Contests
Discounts & Deals
Reviews
Users Reviews
Video Reviews
Support
Windows Malware Removal Help & Support
Mac Malware Removal Help & Support
Mobile Malware Removal Help & Support
Blog
Log in
Register
What's new
Search
Search titles only
By:
Search titles only
By:
Reply to thread
Menu
Install the app
Install
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Forums
Security
Video Reviews - Security and Privacy
Comodo Sandbox (Auto-Containment) have a bug on Windows 10?
Message
<blockquote data-quote="Chimaira" data-source="post: 718829" data-attributes="member: 68951"><p>I have described this above in detail but if you disable UAC and run as standard user you can run apps as the admin user after entering the correct credentials. This option is only available by holding down shift and right clicking any .exe or shortcut, in the context menu an option is there called 'run as different user'. I've have also noted that this option is not available with UAC on.</p><p></p><p>UAC is completely off so there is no elevation possible, run as administrator does not work, any program that needs it will fail, but for those apps that you choose to run through the admin account will have those elevated privileges. So as far as I'm aware there is no possible way for any program to acquire admin privileges unless you run the program through your admin account.</p><p></p><p>I have run it this way for a few days and no major issues showed up. I could perform the things that needed admin elevation with no issue. Except for one program TeraCopy which needs constant admin privileges at all times and would not work.</p><p></p><p>I also want to quote my previous post: "If you compare running as a standard user with UAC on and with UAC off set up the way I've just described you will see that the same restricted standard user integrity levels are maintained meaning that standard user privileges are the only level granted unless you have run that program as your Admin user account as mentioned before."</p><p></p><p>So running things this way as far as I'm aware allows one to maintain the separation between standard user and admin privileges and running CFW with the restricted sandbox settings always being applied, even when you run a program through our Admin account.</p></blockquote><p></p>
[QUOTE="Chimaira, post: 718829, member: 68951"] I have described this above in detail but if you disable UAC and run as standard user you can run apps as the admin user after entering the correct credentials. This option is only available by holding down shift and right clicking any .exe or shortcut, in the context menu an option is there called 'run as different user'. I've have also noted that this option is not available with UAC on. UAC is completely off so there is no elevation possible, run as administrator does not work, any program that needs it will fail, but for those apps that you choose to run through the admin account will have those elevated privileges. So as far as I'm aware there is no possible way for any program to acquire admin privileges unless you run the program through your admin account. I have run it this way for a few days and no major issues showed up. I could perform the things that needed admin elevation with no issue. Except for one program TeraCopy which needs constant admin privileges at all times and would not work. I also want to quote my previous post: "If you compare running as a standard user with UAC on and with UAC off set up the way I've just described you will see that the same restricted standard user integrity levels are maintained meaning that standard user privileges are the only level granted unless you have run that program as your Admin user account as mentioned before." So running things this way as far as I'm aware allows one to maintain the separation between standard user and admin privileges and running CFW with the restricted sandbox settings always being applied, even when you run a program through our Admin account. [/QUOTE]
Insert quotes…
Verification
Post reply
Top