Re: Is System Lockdown the Secret Weapon?



On Mon, 28 Nov 2005 14:17:11 -0700, Josh McKee wrote:

> On 28 Nov 2005 13:02:37 -0800, "Mayor Of R'lyeh"
> <mayor.of.rlyeh@xxxxxxxxx> wrote:
>
>>
>>Josh McKee wrote:
>>> On Mon, 28 Nov 2005 11:51:20 -0700, Snit <SNIT@xxxxxxxxxxxxxxxxxxxx>
>>> wrote:
>>>
>>> >"Josh McKee" <jtmckee@xxxxxxxxxxxxxxx> stated in post
>>> >k4kmo1hsdefs8dn7828vpu7kutca8taru0@xxxxxxx on 11/28/05 11:49 AM:
>>> >
>>> >> Supports what I've been saying for quite some time:
>>> >>
>>> >> We found a vast degree of difference among the three user memberships.
>>> >> On our Windows 2000 Professional client with User permissions only,
>>> >> none of the malware installed completely and two threats actually
>>> >> warned that the user had insufficient privileges.
>>> >>
>>> >> A third loaded a malicious process into memory, but the threat did not
>>> >> reappear after reboot. The Sunbelt scan performed after the reboot
>>> >> could find only a single threat, which consisted of one file in the
>>> >> browser cache.
>>> >>
>>> >> http://www.eweek.com/article2/0,1895,1891447,00.asp
>>> >
>>> >A big part of the problem with Windows is so much software does not work
>>> >when you do not have permissions higher than one would expect for the
>>> >software in question. It puts MS in a tough spot - but one of their own
>>> >making.
>>>
>>> Why is it Microsoft's making?
>>
>>The main reason most I know run Windows with an administrative account
>>is because you need to be in one to burn CDs and DVDs.
>
> Not on this system you don't. Nero Express 6 that came with my DVD
> recorder. Though I did have to download and install "Nero Burning
> Rights" in order to obtain this capability. I don't see why this
> wasn't part of the software that came with the drive.

It does come with the full retail version. Its one of the things many
OEMs choose to leave out when they configure their Nero bundle.

>
>>Even though its not done very often its still a PITA when it needs to be
>>done andyou're running in a normal account. If Microsoft would fix that
>>and make a normal user account the default it would greatly improve
>>things.
>
> I don't see this being Microsoft's issue to solve. If it's third party
> software that is experiencing the problem then logically the problem
> lies with the author of that software.

The problem doesn't actually lie with third party software in this case.
Windows was deliberately designed to deny regular users access to burners
as a security measure.
Nero responded to the demands of its users by coming up with 'Burn
Rights'. As I understand it this program forces the creation of a new
class of user that has restricted privileges and access to the burners.
As I understand it this program is unusable by anyone not using Nero as
their burning software.
In order to address this particular issue Microsoft needs to allow burning
rights to be granted to regular users. Otherwise we're going to end up
with a motley assortment of hacks to do it for them.


--
"The next time you her an alarming speech about
'global warming' on Earth Day, just remember
that the first Earth Day featured alarms about
the danger of a new Ice Age."

Thomas Sowell
.



Relevant Pages

  • Re: Is System Lockdown the Secret Weapon?
    ... >>>is because you need to be in one to burn CDs and DVDs. ... Though I did have to download and install "Nero Burning ... >>>done andyou're running in a normal account. ... >Windows was deliberately designed to deny regular users access to burners ...
    (comp.sys.mac.advocacy)
  • Re: Loading managed DLL
    ... > I have managed DLL named test.dll and is loaded by an ASP .NET web ... It's been working fine in Windows 2000. ... > I give ASPNET local account full rights to the folder where test.dll is ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Users
    ... but iI dont have the rights to change the rights... ... When you tried to "take ownership" were you logged into a user account that has Administrator privileges? ... "If you are using Windows XP Professional, you must disable Simple File Sharing. ...
    (microsoft.public.windowsxp.general)
  • Re: Starting up Windows Program from a webform with current userss authentication
    ... On the other hand i have a windows applications that uses windows ... (with authenticated user impersonation), and navigate to the right record. ... application with the "ASPNET" account. ... > appropriate rights on the directory housing the windows application. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Rights (Permissions) for CD-Writers ?
    ... and with Windows since Windows 3.0 ... ... Now I stumbled into a problem where I installed Ahead Nero 5.5 together ... 'Under Windows NT4/2000 burn rights are required by Nero to access cd ... Please ask your System Administrator ...
    (comp.os.ms-windows.nt.admin.security)