Re: elevated privileges question

Are you asking about Vista/WIn7 UAC and integrity-levels?

Or a general question about CreateProcessAsUser()?
What do you mean by "down-level processes"?



On Mon, Sep 28, 2009 at 10:02 AM, Eric Strain <eric_strain1-/[email protected]>wrote:

>
>
>   Hi All:
>   I have a question about elevated processes. Say a program executes under
> an administrator account and as soon as the main process starts, it executes
> code that elevates its privileges from admin to system level. My question
> is, does the main process now have system  level privileges or does it have
> to call LogonUser( ) and CreateProcessAsUser( ) in order for all down-level
> processes to have system level access? At present the only process in the
> program is the initial one, I have not created any other processes or
> threads.  The program is a simple exe, not a service and it is not
> impersonating anyone. Any insight would be much appreciated. Thanks guys.
>
> -Eric
>
>
>
>