Security considerations in custom shell

[Guest]

Hi Everybody,

I am working on an application, running it as shell and its working fine
with no complications. I have created a user with least priviledges
(usergroup 4).

1. Now I am concerned about security a bit more. I read an articale about
using ACL to control access. I know what components to include(LSSAS, NTdll
and AuthZ) but I have no idea how to use those components actully to manage
Access Control Lists.

2. Being a customized shell, I have removed all welcome screen and splash
screen, but I can still see a blue screen(while auto logon is in process)
before my application starts. Can I change it to black ?

3. After using automatic login, "Ctrl+Alt+Del" is enabled. It was not there
by default. How can I disable this ?

Any help would be appreaciated.

 

[Slobodan Brcin \(eMVP\)]

Hi,

1. Now I am concerned about security a bit more. I read an articale about
using ACL to control access. I know what components to include(LSSAS, NTdll
and AuthZ) but I have no idea how to use those components actully to manage
Access Control Lists.

calcs.exe or trough Win32 API.

2. Being a customized shell, I have removed all welcome screen and splash
screen, but I can still see a blue screen(while auto logon is in process)
before my application starts. Can I change it to black ?

Probably but I newer tried this. Try searching trough google groups:
http://groups.google.com/groups?hl=...F-8&group=microsoft.public.windowsxp.embedded

3. After using automatic login, "Ctrl+Alt+Del" is enabled. It was not there
by default. How can I disable this ?

1. Trough registry.
2. By removing Windows Task Manager component.
3. By modifying GINA sample.
http://groups.google.com/groups?hl=...a=group=microsoft.public.windowsxp.embedded.*


Regards,
Slobodan

 

[Roy Hodgkinson]

On question 2. To change the screen to black instead of blue during autologon:

[HKEY_USERS\.DEFAULT\Control Panel\Colors]
"Background"="0 0 0"

And, to eliminate the mouse cursor:

[HKEY_USERS\.DEFAULT\Control Panel\Cursors]
"Arrow"=hex(2):25,00,53,00,59,00,53,00,54,00,45,00,4d,00,52,00,4f,00,4f,00,54,\
00,25,00,5c,00,63,00,75,00,72,00,73,00,6f,00,72,00,73,00,5c,00,6e,00,75,00,\
6c,00,6c,00,2e,00,63,00,75,00,72,00,00,00

HTH, Roy