Help - Search - Members - Calendar
Full Version: DefensePlus Limited Accont
Gladiator Security Forum > SoftSphere Technologies Support Forums > DefencePlus
d4rkst4r
DefensePlus doesn't seem to work on MS limited accounts i.e. you get the DefensePlus tray icon with a red slash through it. Anyway to correct it? It works on accounts with privileges.
Ilya Rabinovich
Yes, its GUI is for administrative account privileges. If you need- I may do version which will be limited working under limited-rights account.
getDr0ne
QUOTE (Ilya Rabinovich @ Dec 30 2006, 10:49 AM) *
Yes, its GUI is for administrative account privileges. If you need- I may do version which will be limited working under limited-rights account.


I see the same "problem" here. I want to simply secure my wife's pc & my son's pc one running XP the other w2k and I have set them to run on limited user accounts. Defense Wall 1.73 appears to run aok on limited user accounts, but DefencePlus is crashed by windows as "generating errors." I assume there would be some benefit to having DefencePlus protect OS when being run by clueless limited user, unless you advise that windows is safe from buffer overrun attack when user is limited. please advise.
I am currently new to Defense Wall and DefencePlus, so not registered user yet, but headed toward registration as I better understand them. I have used other things in past to secure my windows, and they mostly worked ok, but too complex for wife & son (clueless users). I like what you're doing
getDr0ne
QUOTE (getDr0ne @ Jan 1 2007, 08:05 PM) *
QUOTE (Ilya Rabinovich @ Dec 30 2006, 10:49 AM) *

Yes, its GUI is for administrative account privileges. If you need- I may do version which will be limited working under limited-rights account.


I see the same "problem" here. I want to simply secure my wife's pc & my son's pc one running XP the other w2k and I have set them to run on limited user accounts. Defense Wall 1.73 appears to run aok on limited user accounts, but DefencePlus is crashed by windows as "generating errors." I like what you're doing


Just occured to me, are you saying that DefencePlus continues to operate and protect the system even when windows kills it for generating errors in limited user account, ie, that windows is only killing the GUI and DefencePlus continues protecting the OS in background preventing what it is intented to prevent? if so, ok, and then when I check their pc and login as admin, I'll see the limited user activities in the log??
Ilya Rabinovich
Well, in fact, both of the product are, mostly, driver-level. GUI need to get logs and to control. Both GUI need admins rights to operate in full effect.

Right now you may protect your settings with limited user account. I may create driver-based gates to allow people operates under limited-user account, but this will break this defense. Within DefenseWall 2.0 there will be parental control for it. So, I'm in a little doubts...
getDr0ne
QUOTE (Ilya Rabinovich @ Jan 2 2007, 04:41 PM) *
Well, in fact, both of the product are, mostly, driver-level. GUI need to get logs and to control. Both GUI need admins rights to operate in full effect.

Right now you may protect your settings with limited user account. I may create driver-based gates to allow people operates under limited-user account, but this will break this defense. Within DefenseWall 2.0 there will be parental control for it. So, I'm in a little doubts...


ok, thanks! I imply from your reply that driver-level protection continues with DefencePlus from a limited user account, the limited user simply cannot access the GUI... or I'm not 100% sure since you say GUI needs admin to operate in full effect. As long as DefencePlus continues to perform and block from limited user, sure ok, unless inability to access GUI would muck up operation. just checking. let it be as is, and certainly do not want to break the defense. in past, I used DCS Process Guard and from a limited account there was no GUI in systray, so limited user could not turn off PG, but PG GUI would temp pop up to allow/deny a process that was not in PG's database.
give me a few days to see how computer reacts to DW & DF and I'll register both. so far so good.
Ilya Rabinovich
"In full effect" means that some settings are within the "HKEY_LOCAL_MACHINE" subkeys that are not allowed to be modified under limited user account. DW and DP's GUI directly operates with those keys. It is possible to create driver-based gates to allow operate with those subkeys limited user account, but this will require driver-level parental control defense to allow people protect those settings with password under limited user accounts. Should I explain more?

The defense itself is independent to user account limitations.
getDr0ne
QUOTE (Ilya Rabinovich @ Jan 3 2007, 12:37 PM) *
"In full effect" means that some settings are within the "HKEY_LOCAL_MACHINE" subkeys that are not allowed to be modified under limited user account. DW and DP's GUI directly operates with those keys. It is possible to create driver-based gates to allow operate with those subkeys limited user account, but this will require driver-level parental control defense to allow people protect those settings with password under limited user accounts. Should I explain more?

The defense itself is independent to user account limitations.


no more explanation needed on this one, thanks for your informative replies
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2010 Invision Power Services, Inc.