Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 1061492" data-attributes="member: 32260">I investigated the ACL permissions of C:\Windows\Temp folder. It looks like they are kinda special and similar to the permissions of the %ProgramData% folder.<ol>
<li data-xf-list-type="ol">If one copies the file to C:\Windows\Temp with standard rights, the file location is writable.</li>
<li data-xf-list-type="ol">If one copies the file with higher privileges the file location is not writable (the file cannot be replaced or modified with standard rights).</li>
</ol>The difference is that files in %ProgramData% can be seen in the Explorer with standard rights, but not files in C:\Windows\Temp.If the user wants to open C:\Windows\Temp, the alert is triggered:[ATTACH=full]279205[/ATTACH]After pressing the &lt;Continue&gt; button the user permanently gets access to that folder!!! But then, all locations in C:\Windows\Temp become writable (can be replaced or modified with standard rights).</blockquote>

[QUOTE="Andy Ful, post: 1061492, member: 32260"] I investigated the ACL permissions of C:\Windows\Temp folder. It looks like they are kinda special and similar to the permissions of the %ProgramData% folder. [LIST=1] [*]If one copies the file to C:\Windows\Temp with standard rights, the file location is writable. [*]If one copies the file with higher privileges the file location is not writable (the file cannot be replaced or modified with standard rights). [/LIST] The difference is that files in %ProgramData% can be seen in the Explorer with standard rights, but not files in C:\Windows\Temp. If the user wants to open C:\Windows\Temp, the alert is triggered: [ATTACH type="full" alt="1697676162470.png"]279205[/ATTACH] After pressing the <Continue> button the user permanently gets access to that folder!!! But then, all locations in C:\Windows\Temp become writable (can be replaced or modified with standard rights). [/QUOTE]

Verification