The Curious Engineer

All blogs / Security

Aaron Margosis' Non-Admin, App-Compat and Sysinternals WebLog

learn.microsoft.com/en-us/archive/blogs/aaron_margosis

The Non-Admin blog - running with least privilege on the desktop... and then dealing with the application compatibility fallout... and using Sysinternals and other utilities to figure things out

SecurityWindows internalsDev tools / editors / IDEsMicrosoft blogsMSDN archive

’05’10’15’20’25
Posts
107 from 17 Jun 2004 to 19 Jun 2019
Posting
archived, read-only
Kind
personal blog
Feed
https://learn.microsoft.com/en-us/archive/blogs/aaron_margosis/feed.xml

2019 7

  1. My last blog post on this platform
  2. "AaronLocker" big perf and feature updates (17 June 2019)
  3. "AaronLocker" updates (22 May 2019)
  4. “AaronLocker” updates (13 May 2019)
  5. "AaronLocker" updates (12 May 2019)
  6. "AaronLocker" videos on YouTube
  7. "AaronLocker" moved to GitHub

2018 2

  1. "AaronLocker" update (v0.91) -- and see "AaronLocker" in action on Channel 9!
  2. ANNOUNCING: Application whitelisting with "AaronLocker"

2017 1

  1. The Case of the Reverting Office Theme (resolved with a long-running Procmon trace)

2016 1

  1. Troubleshooting with the Windows Sysinternals Tools - now available!

2015 3

  1. LUA Buglight 2.3, with support for Windows 8.1 and Windows 10
  2. LUA Buglight 2.3 PREVIEW -- Feedback requested
  3. Local Administrator Password Solution, at Ignite

2014 11

  1. It rather involved being on the other side of this airtight hatchway: Unquoted service paths
  2. Interviewed on "Taste of Premier" about Security Guidance for Windows 8.1, Windows Server 2012 R2 and IE 11
  3. The Case of the App Install Recorder
  4. Security baselines for Windows 8.1, Windows Server 2012 R2 and Internet Explorer 11 – FINAL
  5. Sysinternals at TechEd US 2014: LIVE
  6. Sysinternals at TechEd US 2014
  7. Security baselines for Windows 8.1, Windows Server 2012 R2 and Internet Explorer 11
  8. My Ian MacKaye / Dischord Records interview on WTJU.net
  9. I'll be on Defrag Tools (Channel 9)
  10. Speaking at Washington DC IT Pro Camp, Sat. Feb. 22, 2014
  11. Knowledge Base updates about UAC

2013 3

  1. EventCreate and "ERROR: Source parameter is used to identify custom applications/scripts only"
  2. Redefining what "Never doing that again" means... Troubleshooting with the Windows Sysinternals Tools, Second Edition
  3. Sysinternals - and Pass the Hash - at TechEd next week.

2012 10

  1. Mitigating "Pass the Hash"...
  2. Using NTFS Junctions to Fix Application Compatibility Issues on 64-bit Editions of Windows
  3. LUA Buglight 2.2 with support for Windows 8
  4. The Sysinternals book is available in Russian!
  5. Quoted by Raymond Chen!
  6. "Defrag Tools" - a new Channel 9 series (that will talk a lot about Sysinternals utilities)
  7. TSSessions utility
  8. From TechEd: Legacy Web App Issues, Sysinternals Gems, webcast with Mark Russinovich
  9. Legacy Web App Security and Sysinternals at TechEd North America + Europe 2012
  10. Interviewed about the Sysinternals book on Let's Talk Computers

2011 13

  1. Interviewed on “Bytes by TechNet”
  2. Top Ten Deployment Blockers
  3. FAQ: Where Do I Save Files, and How Exactly Do I Do That?
  4. PrivBar Update
  5. IEInternals Reviews the Sysinternals Book
  6. Windows Sysinternals Administrator’s Reference – now available!
  7. Unintended Consequences and Sysinternals at Tech-Ed Available Online
  8. IEZoneAnalyzer updated
  9. The Case of the Mysterious Law Manager Startup Error
  10. LUA Buglight 2.1.1 with support for Win7/2008R2 SP1
  11. Unintended Consequences and Sysinternals at Tech-Ed North America 2011
  12. Disabling User Account Control (UAC) on Windows Server
  13. TechEd sessions on Application Compatibility, Sysinternals utilities, and more

2010 3

  1. Adobe Reader X
  2. LUA Buglight tips: opening a report file
  3. Aaron Margosis @ Tech*Ed North America 2010

2009 6

  1. Machine SIDs and Domain SIDs
  2. LUA Buglight 2.1 released
  3. LUA Buglight
  4. Utilities for Local Group Policy and IE Security Zones
  5. Live, on the internet...
  6. FAQ: How do I start a program as the desktop user from an elevated app?

2008 9

  1. "LUA Bug" demo app
  2. LUA Buglight 2.0, second preview
  3. I'll be at Tech*Ed in Barcelona, Nov 3-7
  4. The Return of PrivBar (x86 and x64)
  5. LUA Buglight 2.0 - preview
  6. Published - Security by Obscurity, and FDCC
  7. Info about LUA Buglight 2.0
  8. I'll be speaking at Tech*Ed in June
  9. Why apps have security bugs ([attempted] humor)

2007 9

  1. Table of Contents (Aaron Margosis' Non-Admin WebLog)
  2. How to cleanly stop Explorer.exe on Windows Vista
  3. Scripting Elevation on Vista
  4. FAQ: Why can’t I bypass the UAC prompt?
  5. And so this is Vista…
  6. Follow-up on "Setting color for *all* CMD shells based on admin/elevation status"
  7. LUA Buglight and drive mappings: Action Required
  8. Setting color for *all* CMD shells based on admin/elevation status
  9. LUA Buglight updated information

2006 13

  1. The SysInternals tools are now on microsoft.com
  2. MSDN webcast: LUA Buglight
  3. LUA Buglight public [pre]-release
  4. "Problems of Privilege: Find and Fix LUA Bugs" in TechNet Magazine
  5. Changing access control on folders vs. files
  6. Anti-virus vs. Non-Admin
  7. Smartcards and other 2-factor authentication
  8. Fixing "LUA Bugs", Part II
  9. Fixing "LUA bugs", Part I
  10. What is a "LUA Bug"? (And what isn't a LUA bug?)
  11. I'm Back! Upcoming Posts...
  12. Workaround for Shutdown.exe LUA bug
  13. LUA Whitepaper released

2005 9

  1. PrivBar source (finally)
  2. Non-Admin, Live!
  3. Table of contents, Aaron Margosis' non-admin blog
  4. How to allow users to manage file and print shares without granting other advanced privileges
  5. MakeMeAdmin follow-up
  6. Changing the system date, time and/or time zone
  7. Ctrl-C doesn't work in RUNAS or MakeMeAdmin command shells
  8. Managing Power Options as a non-administrator
  9. Remembering Calculator and Character Map Settings

2004 7

  1. Running restricted -- What does the "protect my computer" option mean?
  2. PrivBar -- An IE/Explorer toolbar to show current privilege level
  3. MakeMeAdmin -- temporary admin for your Limited User account
  4. RunAs with Explorer
  5. "Zero-day" attacks and using limited privilege
  6. "RunAs" basic (and intermediate) topics
  7. Not running as admin...