![]() To view the IL of a process in Windows, you can use the Process Explorer tool from Sysinternals. ![]() ![]() Windows uses the concept of ILs to protect the core files and processes, so even if you've got full control on a core system file, you will still get an Access is denied error when you delete that file. Therefore, a process with a lower IL cannot write to an object with a higher IL, even if there are full NTFS permissions on that object. In a nutshell, you could say that MIC and IL are more restrictive defense mechanisms used by Windows that override the NTFS permissions (DACL) and evaluate the object's access before the DACL does.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |