Disabling UAC for Only Administrators

Monday, April 21st, 2008

You can disable the—sometimes annoying—User Account Control (UAC) prompts for members of the Administrators group, while leaving them active for limited user accounts. This is great if you don’t want others accessing or changing system settings. Disabling the alerts, however, requires editing the Windows Registry: Hive: HKEY_LOCAL_MACHINE Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System Name: ConsentPromptBehaviorAdmin Type: REG_DWORD Value: 0 ...

Where is Sysprep in Vista?

Monday, April 21st, 2008

In previous versions of Microsoft Windows, the System Preparation Tool (sysprep.exe) was found in the Deployment.cab file on your product CD. If you’ve examined the Vista DVD however, there’s no such cabinet file present. So where can you find sysprep now? Turns out, it’s included in the operating system itself now ...

The Snare Of Unauthorized Requests

Monday, April 21st, 2008

Almost everyone knows what CSRF or better unauthorized requests are. I never really embraced CSRF as the correct term for unauthorized request issues, because the term is outdated and inadequate to contemporary hacking. For me, an unauthorized request is the layer or automation of a hacking procedure without direct interference ...

Details of privilege escalation hole in Windows

Monday, April 21st, 2008

In a security alert last week, Microsoft reported a vulnerability which allows local users and users signed on with access to an Internet Information Server (IIS) or MS SQL server to escalate their privileges. Server operators such as hosting providers who allow user code to be executed, for example on ...