locked
File permission: logonUI.exe RRS feed

  • Question

  • What file permission access does logonUI.exe have while executing the credential provided dll?

    Is it possible to access a users %AppData% folder with a credential provider?


    Tuesday, January 20, 2015 8:49 PM

All replies

  • Yes.

    By default %AppData% grants access to LocalSystem, Administrators Group and the User itself. A Credential Provider which is loaded by logonui.exe is running as LocalSystem (with some rights/privileges) disabled.

    You can dump the permissions on %AppData% to know exactly what permissions LocalSystem has but it is pretty much full access.

    thanks

    Frank K [MSFT]

    Wednesday, January 21, 2015 1:35 AM