Deploying Standard User Analyzer (SUA) Mitigations Enterprise-Wide

re: Deploying Standard User Analyzer (SUA) Mitigations Enterprise-Wide

Chris Jackson - MSFT — Thu, 28 Feb 2008 07:50:31 GMT

Jesse Proulx - virt is identical, domain or no. It's just a file system filter driver. I'd make sure you don't have virt turned off as part of group policy on the domain. You talk about SUA and SDBs which is separate from virtualization. However, shims also work the same, assuming you haven't turned off the shim engine via group policy on the domain.

re: Deploying Standard User Analyzer (SUA) Mitigations Enterprise-Wide

Jesse Proulx — Tue, 26 Feb 2008 20:02:20 GMT

Does the virtualization done by UAC behave diffrently in a domain envirement? Its always seems like we have compatibility issues that force us to have users run applications as local admins when the same software run perfectly on my computer that isnt in the domain as a standard user. I have managed to run SUA on my computer to make custom sdb's that would fix these problems sometimes. however more often than not it seems that the UAC is just not virtualizing right in a domain envirement.

re: Deploying Standard User Analyzer (SUA) Mitigations Enterprise-Wide

Chris Jackson - MSFT — Thu, 27 Dec 2007 00:14:19 GMT

Supriya,

The symbol path is useful when you have a developer examinging the application to change the code to fix the application. If the application is written in native code, the symbols will allow you to translate between wherever in memory the application code is at the moment, and the exact method in the code that requires elevated privileges, so they can go straight there in the code to make the change. If symbols are already configured, SUA will pick them up. For non-developers, this is less interesting.

Stack traces are how you spot all of the functions that are currently being called by the application. This, in combination with symbols, tells you not only where you are in the code, but how you got there. Perhaps there is only a LUA Bug when you call a certain function from one place, but not from others - the stack trace can help you find that.

As for what is new in SUA, I list some of the features in my post here: http://blogs.msdn.com/cjacks/archive/2007/11/13/announcing-the-application-compatibility-toolkit-5-0-2.aspx

Thanks,

Chris

re: Deploying Standard User Analyzer (SUA) Mitigations Enterprise-Wide

Supriya — Fri, 21 Dec 2007 05:42:13 GMT

What are the new features and functionalities in SUA?

re: Deploying Standard User Analyzer (SUA) Mitigations Enterprise-Wide

Supriya — Fri, 21 Dec 2007 05:40:06 GMT

What is the use of symbol path in SUA? While launching the application through SUA the symbol path which comes automatically,is that the defauly symbol path or should we give a path?

What is a Stack trace?How it is useful in SUA?

re: Deploying Standard User Analyzer (SUA) Mitigations Enterprise-Wide

Chris Jackson - MSFT — Wed, 01 Aug 2007 04:36:30 GMT

It's not tied to the installer at all - it's just applied to the file system directly and immediately.

Of course, if uninstalling it deletes the directory that had its ACL changed, then I suppose it would be reverted to normal by virtue of how that works, but if it modified something higher up than it really wouldn't.

re: Deploying Standard User Analyzer (SUA) Mitigations Enterprise-Wide

MC — Tue, 31 Jul 2007 22:08:16 GMT

What about uninstalling the application I have tested and reinstalling it? Would the Loosen ACLs will go back to normal?

re: Deploying Standard User Analyzer (SUA) Mitigations Enterprise-Wide

Chris Jackson - MSFT — Tue, 31 Jul 2007 20:06:51 GMT

Unfortunately, there is no undo feature in the current version of SUA. You'd have to look at the mitigation after analyzing again to see which directories we modified, and then set them back. Wish I had a better answer...

Thanks,

Chris

re: Deploying Standard User Analyzer (SUA) Mitigations Enterprise-Wide

MC — Tue, 31 Jul 2007 19:54:05 GMT

Is there a way to undo the mitigation I have already applied for the Loosen ACLs?

Thanks again!

re: Deploying Standard User Analyzer (SUA) Mitigations Enterprise-Wide

MC — Tue, 31 Jul 2007 19:52:04 GMT

As a matter of fact your answer helped a lot, thanks!