DropMyRights questions

[WSFuser]

1.) how can i tell if an app was successfully launched with lowered rights?

2.) in Michael's blog, the following example is given for the shortcut path:
-{ Quote: "C:\warez\dropmyrights.exe "c:\program files\internet explorer\iexplore.exe"" }-
when i created the shortcut, it would not work unless i put DMR's path in quotes too. is this ok?

[Bob D]

That looks right. My shortcut path here:
C:\DropMyRights\DropMyRights.exe "C:\Program Files\Internet Explorer\IEXPLORE.EXE"
-{ Quote: "how can i tell if an app was successfully launched with lowered rights?" }-
I'd suggest running Bill's "Beta Browser Test" @ Greenborder to verify DMR's efficacy.
http://www.wilderssecurity.com/showthread.php?t=150840
I found the following:
IE passed all (running, as always, under DropMyRights).
Failed ALL except "Steal Passwords" running w/o DMR.

[Mrkvonic]

Hello,

It should work without the DMR part in quotes.

In my case, for example:

G:\DropMyRights\DropMyRights.exe "C:\Proggies\Firefox\Firefox.exe"

To test it, you can use ProcessExplorer (Sysinternals).

Select the process running using DMR. Click on Properties. Select Security tab. Under BUILTIN\Administrators, it should read Owner, Deny, if you run it as normal user (N flag).

Mrk

[WSFuser]

heres what happens when i try it without quotes:

http://img166.imageshack.us/img166/3003/sshot1xh8.png

[Bob D]

Try this. Desktop shortcut to read like:
Target: C:\DropMyRights\DropMyRights.exe "C:\Program Files\Internet Explorer\IEXPLORE.EXE"
Start In: "C:\Program Files\Internet Explorer"

[WSFuser]

i got teh same message :(

i tried placing the DMR executable elsewhere, but i still get the message.

[Bob D]

My IE shortcut.
Target is: C:\DropMyRights\DropMyRights.exe "C:\Program Files\Internet Explorer\IEXPLORE.EXE"

[WSFuser]

i tried making a shortcut exactly like yours but still no luck.

i think the shortcut will still work if i put DMR's path in quotes.

thanks anyways.

[Mrkvonic]

Hello,
Did you install it? You do realize that you need to install it?
Mrk

[WSFuser]

yes i did install the msi file.

i was just testing DMR anyways.

[Rasheed187]

WSFuser, if you have Win XP Pro I would advise you to use the Software Restriction Policies tool, it´s quite powerful stuff, I noticed that even while I installed the Google Toolbar as an admin, it refused to install correctly (on reboot the toolbar would not load) because IE is forced to run with "non-admin rights" on my system. :blink: