More details on Protected Mode IE in Windows Vista

From IEBlog
 
Qoute:
"Hello, I’m Marc Silbey, a Program Manager focused on IE security. I’m back from my honeymoon and I want to follow-up to Rob’s last post on IE7 Security by providing you with more detail on Protected Mode’s compatibility features and by telling you about a related workaround to a known issue in the first Community Technology Preview (CTP) build of Windows Vista.

As Rob mentioned, Protected Mode helps to eliminate the silent install of malicious code through Windows Vista’s User Account Protection (UAP) technology by blocking writes outside of the Temporary Internet Files (TIF) folder. Protected Mode also leverages UAP’s User Interface Privilege Isolation (UIPI) to help prevent Window messages from being sent to higher privilege processes.

For this release, security is our number one priority and preserving compatibility is a close second priority. To maintain compatibility, Protected Mode launches broker processes at the user and admin privilege levels to accomplish elevated operations like saving web pages and installing ActiveX controls through UAP’s Application Info Service (AIS).

User Account Protection is enabled in the Windows Vista CTP build, but Protected Mode work is not done yet and hence users are unable to install ActiveX controls in the default configuration. To solve this problem, the following procedure can be used to temporarily elevate IE’s permissions:

  1. Start IE with elevated permissions: click Start, point to All Programs, right-click IE, and then select Run Elevated.
  2. Perform the ActiveX installation.
  3. Exit the current instance of IE.
  4. Start a new instance of IE normally (without Administrator permissions).

Read the rest here

Resources:
IE Security in Brief

Leave a comment

Filed under Windows Vista

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s