maryz


Hi, All

Do you know how to start an elevated process with medium integrity level from a low integrity level process using API

More specificly, which SID value to use, I saw an hard-coded example using "S-1-16-4096" for Low integrity SID, but what's the value for medium level I cannot find it from June CTP's SDK and document.

Thanks!




Re: Integrity level

maryz


Ok, found the SID value in winnt.h.





Re: Integrity level

Suren Reddy

maryz:

Are you able to successfully convert low level integrity process level to meduim I am also trying to do the same but i am getting error code: 1314 (A required privilege is not held by the client. ).






Re: Integrity level

Nico9.1

I think you cannot start a MediumIL process directly from a LowIL one (and more generally, an elevated process from a least-privileged one); you should use a MediumIL (or HighIL or SystemIL) broker process.
If it was possible it would have security risks because, for example, malware could elevate silently to go outside IE7's protected mode ...

LowIL : S-1-16-4096
MediumIL : S-1-16-8192
HighIL : S-1-16-12288
SystemIL : S-1-16-16384






databaseforum