If you read this : What is the Windows Integrity Mechanism?
You will surely say :" ok that is cool , but how it is useful to me?"
There comes the mighty @Umbra !
by following those simple steps, you will have a better comprehension of Integrity levels.
1- download and install a system monitoring tool like Process Explorer (or Process Hacker); those two are "must-be-in-present" in your system.
2- Run it, (i will use process Explorer for the guide)
3- do as the screenshots
4- Then you will see the integrity levels of each processes.
5- on this screenshot you can see the integrity level of Chrome set as "Untrusted" (it is the lowest and safest level you can have in Win7 ).
6- However in Win8/10 , a new level is called Appcontainer , this level is even safer than Untrusted , basically the process is "sandboxed" by the OS. All Apps from Windows Store run in AppContainer.
It is why Apps from Windows Store are safer than most of the software you will find on the net, which usually runs at medium or low integrity levels.
7- Now , because i want Chrome to be uber-safe , i tweaked it to be ran at "appcontainer" level :
(some of you will say "oh there is some processes not in Appcontainer level !", indeed because Chrome have some processes needing to run a those levels; on my previous screenshots; all of them were at untrusted because i used chrome in Sandboxie; so Chrome inherited Sandboxie own level).
That is all , hope you found this guide useful
You will surely say :" ok that is cool , but how it is useful to me?"
There comes the mighty @Umbra !
by following those simple steps, you will have a better comprehension of Integrity levels.
1- download and install a system monitoring tool like Process Explorer (or Process Hacker); those two are "must-be-in-present" in your system.
2- Run it, (i will use process Explorer for the guide)
3- do as the screenshots
4- Then you will see the integrity levels of each processes.
5- on this screenshot you can see the integrity level of Chrome set as "Untrusted" (it is the lowest and safest level you can have in Win7 ).
6- However in Win8/10 , a new level is called Appcontainer , this level is even safer than Untrusted , basically the process is "sandboxed" by the OS. All Apps from Windows Store run in AppContainer.
It is why Apps from Windows Store are safer than most of the software you will find on the net, which usually runs at medium or low integrity levels.
7- Now , because i want Chrome to be uber-safe , i tweaked it to be ran at "appcontainer" level :
(some of you will say "oh there is some processes not in Appcontainer level !", indeed because Chrome have some processes needing to run a those levels; on my previous screenshots; all of them were at untrusted because i used chrome in Sandboxie; so Chrome inherited Sandboxie own level).
That is all , hope you found this guide useful
Last edited by a moderator:
