Questions tagged [windows-security]

Use with Windows Security, previously called Windows Defender Security Center.

References:
Help protect my device with Windows Security

Related tag:
windows-defender
controlled-folder-access

176 questions
1
vote
2 answers

How can I edit a DACL in C#?

Is there an analog of the SetFileSecurity function? I need to re-write some tests from Python and I'm stuck on this part. In Python I can freely edit a DACL with pywin32 (modules with a C++ implementation to work with Windows API). I can edit any…
Egor Egorov
  • 313
  • 1
  • 4
  • 19
1
vote
1 answer

SmartCardCredentialsProvider.dll UI doesn't accept user input

My company is programming for the SmartCard security setup in Windows. However, we hit a snag when we updated to Fall Creators, which a developer was able to mitigate by not passing a parent window to the CredUIPromptForWindowsCredentialsW()…
Adrian
  • 10,246
  • 4
  • 44
  • 110
1
vote
1 answer

Checking the existence of ACE in windows object DACL

is there a way to check if an ACE already exists in the DACL of an object? I want to use the RtlAddAccessAllowedAce API call to add an ACE to an object, but I want to do that only if the ACE doesn't exist already. Does someone know how can I either…
macro_controller
  • 1,469
  • 1
  • 14
  • 32
1
vote
2 answers

Automatically unblocking executables downloaded from the web site

I have a web site (intranet) that allows you to download an executable (currently a .Net Console Application) written in ASP.NET and is using https. However on many machines I can't run it right away after download - I need to right click on it, go…
Archeg
  • 8,364
  • 7
  • 43
  • 90
1
vote
1 answer

Set Registry key owner to SYSTEM user

I have to add an exclusions path to Windows Defender registry key. I am aware that there are cmdlets provided from Windows Defender to use them directly for these kinds of purposes. But unfortunately, in Windows 7 and PowerShell v2, they are not…
ShaDooW
  • 483
  • 6
  • 18
1
vote
0 answers

Why is my Windows service failing to log in to this database?

This whole web of SQL Server and Windows permissions is so confusing to me. I created a login at Server > Security > Logins with Login name: foo Password: xyz Default database: MyDb Then at Server > Databases > MyDb > Security > Users I…
user7127000
  • 3,143
  • 6
  • 24
  • 41
1
vote
1 answer

Faster method to test if (not current) user is an administrator

I need to test which Windows users have administrator privileges. OK, now read carefully: NOT CURRENT USER. I query all local user accounts, then I test which one of them has administrator privileges. Let's say I'm logged as Joe, my application runs…
Harry
  • 4,524
  • 4
  • 42
  • 81
1
vote
1 answer

Get Windows user account SID by account name only

I am trying to programmatically delete a user profile (the right way) using the DeleteProfile() API. Unfortunately, it wants an account SID as the first parameter. There has to be some magical API that takes a username and spits out an SID, correct?…
Andy
  • 12,859
  • 5
  • 41
  • 56
1
vote
1 answer

Why am I getting "Access denied" when I have effective read permission?

I can't read a particular file, even though as far as I can tell I have read rights on it. Here is what "Effective Access" shows: Here is what Get-Acl is giving me. PS ...> Get-Acl .\HelloWorld.java | Format-List Path :…
kec
  • 2,099
  • 11
  • 17
1
vote
3 answers

ASP.Net unable to see shared folder

I've written a new application in a network I haven't worked in before, and am running into a problem. If I have the following C# code: FileStream fs = File.Create(@"\\MyServer\MyShare\testing.txt"); fs.Close(); In a console application, this code…
John
  • 17,163
  • 16
  • 65
  • 83
1
vote
0 answers

Windows Server Security

In a Windows Server's Event Viewer we found nearly 30,000+ logs which is of Event ID 4625 . Provided one detail. Each are similar with different logontype and Process Name. In firewall we have blocked every port except three RDP, DB and App Server.…
1
vote
3 answers

Is it possible to disallow taking ownership of a file?

I'm curious if there's a way to prevent users (including the ones belonging to the admin group) from taking ownership of a file? I originally create such file from my service that is running under Local System account. I then set that file's DACL to…
c00000fd
  • 20,994
  • 29
  • 177
  • 400
1
vote
0 answers

Microsoft Root Certificate Authority 2010 not valid

On my Windows 8.1 machine (freshly installed), the Microsoft Root Certificate Authority 2010 certificate is listed as not valid (as can be seen on the screenshot below). On the other hand, my Windows 10 machine shows this: What can be the reason…
1
vote
2 answers

Installing MSI with AppLocker active

We ship a component of our software as MSI to customers who have AppLocker activated. The installation fails with AppLocker kicking in. As far as I understand, the problem is: AppLocker default rules only allow Administrators to install MSI…
Thomas Erker
  • 358
  • 1
  • 9
1
vote
1 answer

USBHIDDRIVER works in Visual Studio debug mode but not when deployed to IIS

I'm using USBHIDDRIVER to access a scale connected to our local workstation. Everything works fine when I run the WCF in Visual Studio 2012 Debug. But once I attempt to run the service in IIS it doesn't seem to recognize the USBHIDDRIVER. I have a…
jrobinson6274
  • 163
  • 2
  • 13