AppLocker and SRP and user writable folders (inside Windows and Program files)

Discussion in 'other software & services' started by erim, Mar 14, 2013.

Thread Status:
Not open for further replies.
  1. erim

    erim Registered Member

    Joined:
    Aug 29, 2006
    Posts:
    53
    Some folders, like C:\Windows\tracing are writable for the standard user.
    So the suggestion is to deny those when making Applocker or SRP rules.

    However, I tried to copy and run something as a standard user from C:\Windows\tracing and I couldn't. I could copy the file in there, but not run it.
    I wasn't blocked by AppLocker, it just said I don't have permission.

    So, is there any point in blocking those folders? Can you actually run stuff from any of those as a standard user?
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.