SFCFILES.DLL and Vista

[marc ochsenmeier]

Hi,

it looks like as if Vista does not implement the Windows File Protection
(WFP) anymore.
I know that the User Account Control (UAC) feature and other File System
enhancement protect the Windows Vista files components. Now it looks like
WFP is not used anymore!

I have been searching for sfcfiles.dll and the dllcache directory...but they
are not there anymore!

Could anyone confirm this situation?

Thanks for your help.

Marc Ochsenmeier
www.propagating.net

 

[Alun Jones]

it looks like as if Vista does not implement the Windows File Protection
(WFP) anymore.
I know that the User Account Control (UAC) feature and other File System
enhancement protect the Windows Vista files components. Now it looks like
WFP is not used anymore!

I have been searching for sfcfiles.dll and the dllcache directory...but
they are not there anymore!

Could anyone confirm this situation?

This is semi-correct.

Instead of having WFP monitor all file access to protected files, and
replace files after you've done something wrong, Vista goes one step
better - you simply can't access any of the files in %WINDIR%\SYSTEM32 -
they can only be added, modified or deleted by the TrustedInstaller service.

Since this is enforced by NTFS ACLs, you can of course take ownership,
change the ACLs, and give yourself access - but why would you want to?
Okay, maybe to install an application that requires it be in SYSTEM32. But
then, I haven't seen that as being a problem yet, every old application I've
installed has been able to do this, presumably because it uses the setup API
or MSI to do the copying.

Alun.
~~~~