Standard User rights to copy .exe files in System32 directory?
I am trying to lock down my son's computer to stop him playing games on it. However he seems to have found a security hole that allows him to elevate himself to Administrator which overcomes all my attempts to lock down the PC. It seems that the default
security settings for a Standard User on Win 7 Home Premium (64 bit OS on a Dell laptop) has permissions to copy a file in the Windows\System32 directory. That allows him to copy cmd.exe over osk.exe. Then from the logon-in screen he can invoke a command shell
using the accessability features (osk.exe = onscreen keyboard), this command prompt runs at an Admin security level (I guess because it is invoked by a kernel process??) he can then use the net user command to elevate his user account to be an Administrator
account.
I seems strange to me that a standard user has rights to copy .exe files around in the system32 directory. Can anyone verify if this is expected behaviour or has the system been altered in some way that I am not aware? If so can anyone help by providing
guidance on how to reset the security permissions on system32 back to the correct default settings.
Any help appreciated.
Pedro.
By default standard user doesn't have any permission in System32 and is unable to install any programs. I believe he somehow manage to get access to administrator password. You may try to remove all administrator permissions and then change your administrator's
password and enable bitlocker.
Similar Messages
-
Unix command to create a copy of file from unix directory
Hi guys,
what is the Unix command to create a copy of file from unix directory?
Thanks a lot!If you haven't noticed, this is a ABAP forum.
You can go to the UNIX thread instead and post it there,
SAP on UNIX
You can expect answers there -
In domain environment standard users can't open .psd files
in domain environment with non admin users; getting this error: http://imageshack.com/a/img543/9085/cdnu.png
only administrators can open .psd files
what permissions needs a standard user to open .psd files?did fw work previously to open psd files? - no, only admin users can open psd files wiht fw or ps.
do you see that error with all psd files? - yes, all psd files give this error, no error given jpeg or png files
are those cs6 psd files? - yes.
what happens if you right click fw>click 'run as administrator'? - same error.
i have to give local administrator rights to users that they can work with psd files. -
How to copy a file to a directory?
private static void copy(String src, String dest) throws IOException{
File inputFile = new File(src);
File outputFile = new File(dest);
FileInputStream in = new FileInputStream(inputFile);
FileOutputStream out = new FileOutputStream(outputFile);
int c;
while ((c = in.read()) != -1)
out.write(c);
in.close();
out.close();
}The above code certainly does so but it is too slow. Another way I can think of is creating a .bat file and then execute it. But that's platform dependent.
Does anybody have better suggestions？Or use FileChannels (from java.nio.channels). That's
even faster. Should work somehow like this
(untested):
private static void copy(String src, String dest)
throws IOException{
File inputFile = new File(src);
File outputFile = new File(dest);
FileInputStream in = new
w FileInputStream(inputFile);
FileOutputStream out = new
w FileOutputStream(outputFile);
FileChannel inc=in.getChannel();
FileChannel outc=out.getChannel();
inc.transferTo(0,inc.size(),outc);
inc.close();
outc.close();
in.close();
out.close();
http://javaalmanac.com/egs/java.nio/CreateMemMap.html?l=rel
try {
File file = new File("filename");
// Create a read-only memory-mapped file
FileChannel roChannel = new RandomAccessFile(file, "r").getChannel();
ByteBuffer roBuf = roChannel.map(FileChannel.MapMode.READ_ONLY, 0, (int)roChannel.size());
// Create a read-write memory-mapped file
FileChannel rwChannel = new RandomAccessFile(file, "rw").getChannel();
ByteBuffer wrBuf = rwChannel.map(FileChannel.MapMode.READ_WRITE, 0, (int)rwChannel.size());
// Create a private (copy-on-write) memory-mapped file.
// Any write to this channel results in a private copy of the data.
FileChannel pvChannel = new RandomAccessFile(file, "rw").getChannel();
ByteBuffer pvBuf = roChannel.map(FileChannel.MapMode.READ_WRITE, 0, (int)rwChannel.size());
} catch (IOException e) {
} -
If I run FF in a standard user account (non-admin) pdf files will not open. If I start FF in the standard user account but right-click FF and "run as administrator" the same pdf file will now open fine.
( links in emails )
this is what fixed my issue with links in my windows live mail
in Firefox go to tools >options >advanced > general tab > at the bottom click the check now button to make sure Firefox is your default browser . if its not click yes to make it default now your links in emails should open in Firefox properly -
Pdf file not able to perform the user rights getting failure message
Hi All
i am using a trial version of Livecycle ES.
I am facing a issue while providing the user rights to the PDf file (dynamic file created in livecycle Designer 7.0). After uploading the file and providing the user right to embedded the file attachment. I am getting a failure message. Don’t know what the reason is.
Please kindly guide me on
Getting the Error logs, where I can specify and analysis the problem in detail.
On what are the case’s that I will be prompted for such error
Thanks in Advance
Sreekesh Anand.SWe had issues with attachments in version 7.0. You might try opening the LiveCycle 7.0 form in 8.1 or higher and then saving it.
-
File Expiration Task - User rights lost
Hi
I created a File Expiration Task on Windows server 2008 R 2. And the job is running successfully.But all the user rights of those expired files are lost after they has been moved...There is no option I
can find and I dont wanna use "Custom File Management Tasks". How can I move the expired files without losing the user rights?Hi,
As you said there is no specific options for "keeping" or "not keeping" original permissions. So if file permissions are inheriting the destination folder, we cannot change it.
I have 2 possible workaround.
1. Custom (which you would like to avoid). Sample could be found in this article:
http://blogs.technet.com/b/filecab/archive/2009/05/11/customizing-file-management-tasks.aspx
2. Use Robocopy to move files older than n days. See the following parameters:
/MAXAGE:n :: MAXimum file AGE - exclude files older than n days/date
/MINAGE:n :: MINimum file AGE - exclude files newer than n days/date
/MAXLAD:n :: MAXimum Last Access Date - exclude files unused since n
/MINLAD:n :: MINimum Last Access Date - exclude files used since n.
(If n < 1900 then n = n days, else n = YYYYMMDD date).
You could schedule a task to run this command.
If you have any feedback on our support, please send to [email protected] -
hi,
i need to come out a program, which can copy/delete file from unix directory A to directory B, on the application server.
does any one have any idea how am i going to code the abap program for this?
thanks> i need to come out a program, which can copy/delete file from unix directory A to directory B, on the application server.
>
i am assuming that your Application server is Unix.
unixcommand cp is used to copy the a file from one directory to another.
cp /dir/file1 /dir2/file2
the above command will copy the file1 of dir1 to file2 of dir2.
for delete use the command rm,
rm /dir/fiel1
the above command will remove the file1 from directory dir.
REPORT ZUNIX line-size 400
no standard page heading.
parameters : unixcom like rlgrap-filename.
data: begin of tabl occurs 500,
line(400),
end of tabl.
data: lines type i.
start-of-selection.
refresh tabl.
call 'SYSTEM' id 'COMMAND' field unixcom
id 'TAB' field tabl[].
"if any error or any thing you get in the tabl
"just check the tabl once after the finishing -
Java Program to copy file from one directory to another failing
Hello All,
Oracle Applications 12.1.3
RDBMS: 11.2.0.30
SQL*Plus: 10.1.0.5.0
Java beginner here so help is much appreciated. I'm have some java code that I'm using to copy a file from one directory to another in an Oracle Applications Server. I notice that when moving to a new instnace I started to get file not found errors. I think it's because of the directory. My question is, does the directory in which I trying to pick up the file have to be a DBA_DIRECTORY, or a UTL_FILE directory in order for the java to find the file and move it?
Here is my code...
CREATE OR REPLACE AND COMPILE JAVA SOURCE NAMED "COPY_FILE_JVS" AS
import java.io.*;
public class COPY_FILE_JVC{
public static void copy(String SourceFile, String DestDir) {
File source = new File(SourceFile);
File dest = new File(DestDir);
File cpDestFile = null;
try {
if (dest.isDirectory()) {
if(source.isFile()) {
System.out.println("File name = " + source.getName());
System.out.println("File name dest = " + dest.getPath() );
System.out.println("File name cpDestFile = " + dest.getPath() + File.separator + source.getName());
cpDestFile = new File(dest.getPath() + File.separator + source.getName());
else {
System.out.println("Directory or File Not Found");
return;
BufferedInputStream br = new BufferedInputStream (new FileInputStream (source));
BufferedOutputStream bw = new BufferedOutputStream (new FileOutputStream (cpDestFile));
int read = 0;
while((read = br.read()) != -1) {
//System.out.println((char)read);
bw.write(read);
br.close();
bw.close();
catch (FileNotFoundException e) {
e.printStackTrace();
catch (IOException e) {
e.printStackTrace();I get these messages when calling the java from SQL Plus as follows...
serveroutput on size 100000;
dbms_java.set_output(1000000);
MY_PKG.CopyFile('/home/my_user/set_env.sh','/interface/home'); (this is call to oracle pl/sql package which calls the java.)
PL/SQL procedure successfully completed.
Directory or File Not Found
PL/SQL procedure successfully completed.
If I change the directory from /home/my_user/ to any directory that is defined in DBA_DIRECTORIES or is a UTL_FILE directory to program works. Is it perhaps because the java is in a PL/SQL package as seen below? The PL/SQL program runs as the APPS user and I have issued the following the command grant JAVASYSPRIV to APPS.
Here is the PL/SQL Package....
CREATE OR REPLACE PACKAGE BOLINF.MY_PKG AUTHID CURRENT_USER AS
CopyFile(p_SourceFile IN VARCHAR2, p_DestDir IN VARCHAR2);
+++++++++++++++++++++++++++++
CREATE OR REPLACE PACKAGE BODY BOLINF.MY_PKG is
CopyFile(p_SourceFile IN VARCHAR2, p_DestDir IN VARCHAR2)
AS LANGUAGE JAVA NAME 'COPY_FILE_JVC.copy(java.lang.String, java.lang.String)'; -
Hi - is there a way for a mac user to download an exe file - I'm needing to download some software from my internet company in Africa - it tracks my usage, important because here we pay per download - thus the software is a program that tracks usage so we don't go over our monthly amount . . . as most things here, there is almost nothing set up for macs . . . hence my query: is there a way to convert an exe file so that I can use it? THANKS, Autumn
Hi Masego
Downloading is easy - but if it's an exe file then you might not be able to make much use of it on OS X, as it won't run.
To run Windows exe files on a Mac you need one of the following technologies:
1. A version of Windows installed on a separate partition of your hard disk, using Boot Camp.
2. A version of Windows installed using a virtualisation technology, such as Virtual Box.
3. I'm told that "Mono" will allow you to run certain exe files under OS X but I've never tried it myself. Mono is free and if you do a search for it then you might find someone who can give you more support.
Bob -
How to disable .EXE files to be run from Group Policy
I would like to know how to disable .exe files from GP?
Thanks in advanceAll exe files icluding calc.exe, notepad.exe and explorer.exe or just some exe files?
There are different approaches to this.
If you're trying to block a single executable that you're familiar with you can disable it from a GPO using the setting:
User Configuration/Administrative Templates/System/Don't run specified Windows applications
Another option is to specify only the applications you want to allow Using:
User Configuration/Administrative Templates/System/Run only specified Windows applications
This one would probably take a lot of work to populate for a system with many applications installed or for a corporate environment.
None of the two mentioned settings takes into account that a user can name their exe file what they want so renaming mydangerousapp.exe to explorer.exe would make it a perfectly legitimate executable.
A more robust and managable way of securing your systems by controlling which applications that can be launched is Software Restriction Policies.
Check this article for an introduction to Software Restriction Policies: http://technet.microsoft.com/en-us/magazine/2008.06.srp.aspx -
I am trying to create a script where the user can initiate a
download/Save/copy of a stored file from my HDD to a flash drive.
It would seem that baCopyProgressFile would be ideal for this
situation, but I am authoring on a Intel MBP and it does not appear
that Buddy API is compatible with Intel Macs at this time. I only
need this projector to display on this MBP (this is really just a
quick proof of concept project that will be run locally), so any
suggestions or alternatives would be very helpful. Thanks.> By main directory, I mean the directory where the
director project resides. I
> would like to copy a movie from this directory to the
root of the flash drive
> directory.
I'm still not understanding you. You want to copy a file from
the
directory where the projector is, or a sub-directory?
If you want to copy from a sub-directory, try something like:
on mouseUp me
tSource = "@/movies/480p.mov"
tDest = "/Volumes/bb/480p.mov"
OK = baCopyFileProgress(tSource, tDest, "IfNewer", "Copying
Movie to
disk...", "Cancel", 0)
if OK <> 0 then alert string(OK)
end
> I updated the code with yours, and now when I run the
movie, it gives me an
> error stating:
> Script error: String expected
> Alert OK
> 5
My mistake. I assumed that when you use 'alert' whatever you
are
alerting is auto-cast to a string. Try the above instead.
> If I adjust the code so that it copies the file from the
projects directory
> and pastes it into the same, then the file will copy
with the progress bar and
> after the copy is complete it gives me the same error
message as above, only
> with a '0' instead of a 5.
If you look in the docs for Buddy API, 0 means the operation
succeeded
and 5 means "Couldn't create directory for Dest file"
(suggesting your
destination path is incorrect)
Since you already use Buddy API I suggest you use a
combination of
baDiskList() and baDiskInfo(disk, "type") to determine which
is your
Flash drive and then use that disk as your root for copying.
For example:
on mouseUp me
lDisks = baDiskList()
lTargets = []
repeat with aDisk in lDisks
if baDiskInfo(aDisk, "type") = "Removable" then
-- found (potential) target
lTargets.append(aDisk)
end if
end repeat
case count(lTargets) of
0: -- no removable drives available to copy to
alert "Drive not found"
1:
tSource = "@/movies/480p.mov"
tDest = lTargets[1] & "480p.mov"
me.mCopyFile(tSource, tDest)
otherwise:
-- more than one removable drive available
-- you'll need to create a routine to determine
-- which one you want to copy to, or present the user with
-- a selection they can choose from
end case
end
on mCopyFile me, aSource, aDestination
OK = baCopyFileProgress(aSource, aDestination, "IfNewer",
"Copying
Movie to disk...", "Cancel", 0)
if OK <> 0 then alert string(OK)
end -
Through Java code I want to execute a exe file which is in aJar file
I am having some classes and an exe file in a directory. I have made them in to a Jar file. In a class file which is in that jar file i want to execute a Exe file which is also resides in that jar file. Is it possible to exexute that EXE file?
For Example....
1. Im having a directory named CLIENT.
2. In that directory I have 10 clss files and an EXE file.
3. These class files and EXE files are ziped in to a Jar file.
4. I have to give the Jar file to my client.
5. He can put that Jar file where ever he installed my product may be C driver or D drive like that
Now the problem is...
I want to execute the Exe File from one of the class where both the exe file and class file resides in the Jar file
This is my requirment
Can anyone Help to me to solve this problem?
Thanks in Advancd
Ibram Shah.A.M
([email protected])The answer is to extract the EXE into a temp directory, execute it, and delete it when you're done. For example:
//This is the path *inside* the JAR file!
InputStream in = getClass().getResourceAsStream("/resources/myprog.exe");
OutputStream out = new FileOutputStream("myprog.exe");
File file = new File("myprog.exe");
int data;
while((data = in.read()) >= 0) out.write(data);
in.close();
out.close();
//Execute the EXE here using java.lang.Runtime.exec()
if(file.exists()) file.delete();
... -
Copying files from same directory as *.java files and moving to WEB-INF/classes/ package name
In our current application we have the following source directory structure:
src -
- com
- edeploy
- subdirs ... (many directories here)
- jsp
-subdirs ... (many directories here)
In com.edeploy.subdirs, there exists *.java files, and *.gxq files (query
files). I would like to modify my build.cmd script to copy the *.gxq files
into the same directory as the class files.
Here's my script so far:
@REM Create list of files to compile
DIR /S /B /A:-D src\com\*.java >class.list
@REM Create list of query files
DIR /S /B /A:-D src\com\*.gxq >query.list
@REM Compile
javac -d stage\WEB-INF\classes @class.list
@REM Copy query files into class directory
.......... code needed here ......
Can anyone help me with this?
Thanks,
Matt
You may want to check out:
http://jakarta.apache.org/ant/index.html
Gary
"Matt Raible" <[email protected]> wrote in message
news:[email protected]..
> In our current application we have the following source directory
structure:
>
> src -
> - com
> - edeploy
> - subdirs ... (many directories here)
> - jsp
> -subdirs ... (many directories here)
>
>
> In com.edeploy.subdirs, there exists *.java files, and *.gxq files (query
> files). I would like to modify my build.cmd script to copy the *.gxq
files
> into the same directory as the class files.
>
> Here's my script so far:
>
> @REM Create list of files to compile
> DIR /S /B /A:-D src\com\*.java >class.list
>
> @REM Create list of query files
> DIR /S /B /A:-D src\com\*.gxq >query.list
>
> @REM Compile
> javac -d stage\WEB-INF\classes @class.list
>
> @REM Copy query files into class directory
> .......... code needed here ......
>
> Can anyone help me with this?
>
> Thanks,
>
> Matt
>
>
-
Can i load and run .exe file from jar file??
I generated a .jar file witch contain an executable (.exe file) under a directory called 'exec'. I can't execute this exe file using
URL urlExecutable = DlgueLancement.class.getResource("/exec/myPrograme.exe");import java.io.*;
import java.util.jar.*;
import java.util.zip.*;
public class Extracter
public static File extract(File archive, String filename, File target) throws IOException, ZipException
if( archive == null )
throw new IllegalArgumentException("Null archive file");
if( !archive.exists() )
throw new IllegalArgumentException("Specified archive does not exists");
if( !archive.isFile() )
throw new IllegalArgumentException("Specified archive file is not a file");
if( filename == null )
throw new IllegalArgumentException("Null filename");
if( filename.length() == 0 )
throw new IllegalArgumentException("Empty filename");
if( target == null )
throw new IllegalArgumentException("Null target");
if( target.exists() && file.length() > 0 )
throw new IllegalArgumentException("Target file already exists and cannot be overwritten");
JarFile jar_archive = new JarFile(archive);
ZipEntry entry = jar_archive.getEntry(filename);
if( entry == null )
return null;
InputStream istream = null;
FileOutputStream ostream = null;
try
istream = jar_archive.getInputStream(entry);
if( istream.available() == 0 )
return null;
byte[] buffer = new byte[istream.available()];
istream.read(buffer);
ostream = new FileOutputStream(target);
ostream.write(buffer);
return target;
finally
if( istream != null )
try{istream.close();}catch(Exception e){}
if( ostream != null )
try{ostream.close();}catch(Exception e){}
}
Maybe you are looking for
-
Highlighting text (as in Word)
Hi - Is is possible to highlight text, that is color over text, in a similar way to how it can be done in Word. I use this feature in Word a lot for editing & redrafting purposes! Many thanks!
-
Manual iTunes back up. How to do it?
I'm looking for a manual way to back up my entire Itunes. Other than time machine. For those of you familiar with iPhoto, if I go to Home, Pictures. I can copy the Library to an external drive and have a back up of all my pics. If I go to Home, Mus
-
Using a Windows formatted iPod Nano (4th Gen) with Bootcamp on a Mac(Win XP
Hey I was wondering if anyone knows if you can use a previously formatted iPod Nano (4th Gen) with a Mac that has XP Bootcamped on to it. If the Nano is placed in manually manage music with the original computer it was formatted with, will it be able
-
I m storing the attatchments in java table as binary data.Is there any restriction on the size of the attachmnents? Also while Downloading the file the name of the file is not visible. Please help me on this issue.
-
New to CC premier pro does not show up in APP list, neither does AE.
cannot download the app