talkinggoat said:
Anyone know the exact purpose of the appinfo service?
Hey, kinsman!
Good to hear from you. If you go to Google and search on "Vista appinfo
site:microsoft.com", the very first hit will show you this:
<quote>
Executing an image that requests administrative rights causes the
Application Information Service (also known as AIS, contained in
%SystemRoot%\System32\Appinfo.dll), which runs inside a Service Host process
(%SystemRoot%\System32\Svchost .exe), to launch Consent.exe
(%SystemRoot%\System32\Consent.exe). Consent captures a bitmap of the
screen, applies a fade effect to it, switches to a desktop that's only
accessible to the Local System account, paints the bitmap as the background,
and displays an elevation dialog box that contains information about the
executable. Displaying on a separate desktop prevents any malware present in
the user's account from modifying the appearance of the dialog box.
</quote>
A couple of hits down
(
http://msdn2.microsoft.com/en-us/windowsvista/aa904985.aspx)
<quote>
The Application Information Service (AIS) is a system service that launches
applications requiring elevated privileges by first obtaining user consent
(through the Consent User Interface) for privilege elevation, and then
creating a new process for the application with the user's full access
token.
</quote>
Hope it helps.
Creag an Tuirc!!
Andrew
