Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 965347" data-attributes="member: 32260">I used this idea here:[URL unfurl=&quot;true&quot;]https://malwaretips.com/threads/safe-email-on-sua.103683/[/URL]Such Standard User account is protected by very restrictive SRP (similar to max H_C settings) and other accounts can still be unrestricted.But, it is not compatible with default-deny H_C settings. One has to apply a systemwide default-allow SRP (via HKLM registry hive) and next apply a local default-deny SRP via HKCU registry hive (for the selected account(s) ).Technically this can be done by using H_C and some quick registry editing. One has to transfer the system-wide SRP settings made by H_C from the HKLM registry hive to the registry hive related to SUA (HKCU hive cannot be used ---&gt; the hive with user SID is required). Next, the system-wide SRP must be set to default-allow.</blockquote>

[QUOTE="Andy Ful, post: 965347, member: 32260"] I used this idea here: [URL unfurl="true"]https://malwaretips.com/threads/safe-email-on-sua.103683/[/URL] Such Standard User account is protected by very restrictive SRP (similar to max H_C settings) and other accounts can still be unrestricted. But, it is not compatible with default-deny H_C settings. One has to apply a [COLOR=rgb(0, 168, 133)][B]systemwide default-allow[/B][/COLOR] SRP (via HKLM registry hive) and next apply a [COLOR=rgb(184, 49, 47)][B]local default-deny[/B][/COLOR] SRP via HKCU registry hive (for the selected account(s) ). Technically this can be done by using H_C and some quick registry editing. One has to transfer the system-wide SRP settings made by H_C from the HKLM registry hive to the registry hive related to SUA (HKCU hive cannot be used ---> the hive with user SID is required). Next, the system-wide SRP must be set to default-allow. [/QUOTE]

Verification