Is there a way to launch processes with arbitrary MIC labels?

Posted: 09-27-2006, 12:51 AM

Walter Porter

Guest
Posts: n/a

Hello:

Is there a way to launch processes with arbitrary (or at least lower)
mandatory integrity control labels? For example, is there something like a
runas.exe command which can be used in a CMD shell running with the Medium
MIC label to launch a process with the Low MIC label? Is the only way to
launch a process with the Low MIC label is to hard code that label into the
assembly or PE?

Thanks!

Reply With Quote

Responses to "Is there a way to launch processes with arbitrary MIC labels?"

Jimmy Brush

Guest
Posts: n/a

Re: Is there a way to launch processes with arbitrary MIC labels?

Posted: 10-04-2006, 01:45 PM

Hello,

runas looks as if they are working in adding this feature. Check out:

runas /trustlevel
runas /showtrustlevels

In the mean time, I believe winternals has a tool that will allow you to do
this.

--
- JB

Windows Vista Support Faq
http://www.jimmah.com/vista/

Reply With Quote

Walter Porter

Guest
Posts: n/a

Re: Is there a way to launch processes with arbitrary MIC labels?

Posted: 10-13-2006, 06:09 PM

> runas /trustlevel

> runas /showtrustlevels

I'm not sure, but I believe these are for Software Restriction Policies, not
MIC.

> I believe winternals has a tool that will allow you to do this.

Process Explorer can launch a program as a limited user, i.e., with most
privileges stripped and with a deny-only SID for the Administrators group in
the SAT, but I don't see a way for it to launch with arbitrary MIC labels
(unless it's a different tool you had in mind).

Thank you for the suggestions though!

Reply With Quote

Reply

« Strange security audit events | Can't unblock an executable copied from another system »

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Posting Rules
You may not post new threads You may post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is On HTML code is Off Trackbacks are On Pingbacks are On Refbacks are On

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
explorer.exe memory leak? wow hope it get fixed before launch!	Malke	Windows Vista File Management	1	01-13-2007 06:40 PM
Quick Launch	Bob Holmes	Windows Vista Performance & Maintenance	5	09-17-2006 07:48 PM
CPU and memory hogging by various processes	Nicholas Bedworth, CTO, DigitalDirect	Windows Vista Performance & Maintenance	4	05-30-2006 07:30 PM
Invisible Processes	Adahn	Windows Vista Security	22	03-21-2006 11:37 AM

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90