Microsoft Windows Vista Community Forums - Vistaheads
Recommended Download



Welcome to the Microsoft Windows Vista Community Forums - Vistaheads, YOUR Largest Resource for Windows Vista related information.

You are currently viewing our boards as a guest which gives you limited access to view most discussions and access our other features. By joining our free community you will have access to post topics, communicate privately with other members (PM), respond to polls, upload content and access many other special features. Registration is fast, simple and absolutely free so , join our community today!

If you have any problems with the registration process or your account login, please contact us.

Driver Scanner

TrustedInstaller User?

microsoft.public.windows.vista.security






Speedup My PC
Reply
  #1 (permalink)  
Old 02-26-2007
=?Utf-8?B?Um9ja3lE?=
 

Posts: n/a
TrustedInstaller User?
I ran icacls on c:\windows and noticed a account called NT
Service\TrustedInstaller that has full access to the directory. But I cannot
find this account in the list of users on the my Vista Machine.
Research shows that this is the account used by Vista installation service
for installing applications. But Task Manager does not show any service or
process running under that account.

Can someone demistify where this account resides and which service uses
this? Can I create additional directories and only allow this account to
create/write files to it?
Reply With Quote
Sponsored Links
  #2 (permalink)  
Old 02-26-2007
=?Utf-8?B?SmVzcGVy?=
 

Posts: n/a
RE: TrustedInstaller User?
> I ran icacls on c:\windows and noticed a account called NT
> Service\TrustedInstaller that has full access to the directory. But I cannot
> find this account in the list of users on the my Vista Machine.
> Research shows that this is the account used by Vista installation service
> for installing applications. But Task Manager does not show any service or
> process running under that account.


TrustedInstaller _is_ the Installer service. It is actually a Service SID
representing that service. The fact that it is the only thing that has write
permission to system binaries means that it is the only thing that can update
them (without jumping through hoops).

Yes, you can make that account the only thing that has permissions. It is
treated as any other account for access checking purposes.
Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
XP Can't access Vista Share TedF microsoft.public.windows.vista.networking sharing 12 04-30-2010 14:12
User login issue John microsoft.public.windows.vista.security 7 05-24-2007 18:43
Can You Move User Personal Folders to a Network Location =?Utf-8?B?UmlkZXN5?= microsoft.public.windows.vista.networking sharing 3 02-26-2007 20:54
Standard user - start Explorer as Admin doesn't work David Hearn microsoft.public.windows.vista.security 5 01-11-2007 19:35
Re: SUID Kurt Harriger microsoft.public.windows.vista.security 7 12-18-2006 11:06




All times are GMT +1. The time now is 23:47.




Driver Scanner - Free Scan Now

Vistaheads.com is part of the Heads Network. See also XPHeads.com , Win7Heads.com and Win8Heads.com.


Design by Vjacheslav Trushkin for phpBBStyles.com.
Powered by vBulletin® Version 3.6.7
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Search Engine Optimization by vBSEO 3.6.0 RC 2

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120