lexingont

VS2005 installer places sample programs under the "Program Files" directory where VS2005 is normally installed as default. However, no one can build these sample programs from the "Program Files" directory in Vista unless VS2005 is elevated as admin. Microsoft recommend to people to copy the samples programs to some other places where you can build them without elevation.

My question is Microsoft could have asked customers to change the sample folder access permission for Users to "Full control" so that sample programs can be modified, build, and run from the "Program Files" directory. There is a discussion about this within my workplace, and would like to hear others' oppinions on this.

Thanks.



Re: Security for Applications in Windows Vista Cannot build VS2005 sample programs from the "Program Files" directory in Vista

AndyCadley

Program Files is one of the 'trusted locations' and so allowing arbitrary writes there is a potential security hole (via a UIAccess=true manifested executable). It's much safer to copy them to a per-user location.



Re: Security for Applications in Windows Vista Cannot build VS2005 sample programs from the "Program Files" directory in Vista

lexingont

I agree, but I cannot seem to locate an article that discusses this. It would be nice if you know where to find an article that discusses this.