Security in Vista Business vs. Vista Ultimate

J

Jeff Lynch [MVP]

Are the default security settings different in Vista Business than in Vista
Ultimate (both RTM)? I've noticed a special account called
"TrustedInstaller" in Vista Business that has full control permissions for
the system32 folder and files but this account doesn't seem to exist in
Vista Ultimate. I'm trying to install Outlook 2007 Business Contact Manager
under Vista Business and it fails due to a permissions error but it installs
just fine under Vista Ultimate.

Any help is greatly appreciated.
 
P

Paul Adare

in the microsoft.public.windows.vista.security news group, Jeff
Lynch said:
Are the default security settings different in Vista Business than in Vista
Ultimate (both RTM)? I've noticed a special account called
"TrustedInstaller" in Vista Business that has full control permissions for
the system32 folder and files but this account doesn't seem to exist in
Vista Ultimate. I'm trying to install Outlook 2007 Business Contact Manager
under Vista Business and it fails due to a permissions error but it installs
just fine under Vista Ultimate.

Jeff, are these both clean installs of RTM and not upgrade
installs of a previous release? My understanding is that the
TrustedInstaller is gone in the RTM versions of all Vista SKUs.
I've not installed Business yet but I know it is gone from
Ultimate and I know that I read somewhere recently that
TrustedInstaller is gone...

I'll try and throw Business up in a VM today and check.
 
P

Paul Adare

the microsoft.public.windows.vista.security news group, Paul
Adare said:
in the microsoft.public.windows.vista.security news group, Jeff


Jeff, are these both clean installs of RTM and not upgrade
installs of a previous release? My understanding is that the
TrustedInstaller is gone in the RTM versions of all Vista SKUs.
I've not installed Business yet but I know it is gone from
Ultimate and I know that I read somewhere recently that
TrustedInstaller is gone...

I'll try and throw Business up in a VM today and check.

Ok, so no TrustedInstaller in a clean install of Business
either.
 
P

Paul Adare

the microsoft.public.windows.vista.security news group, Paul
Adare said:
the microsoft.public.windows.vista.security news group, Paul


Ok, so no TrustedInstaller in a clean install of Business
either.

Hmm, but it does show up in the Windows folder DACL on both
Ultimate and Business. Weird. I'll see what I can dig up...
 
P

Paul Adare

in the microsoft.public.windows.vista.security news group, Jeff
Lynch said:
Are the default security settings different in Vista Business than in Vista
Ultimate (both RTM)? I've noticed a special account called
"TrustedInstaller" in Vista Business that has full control permissions for
the system32 folder and files but this account doesn't seem to exist in
Vista Ultimate. I'm trying to install Outlook 2007 Business Contact Manager
under Vista Business and it fails due to a permissions error but it installs
just fine under Vista Ultimate.

Any help is greatly appreciated.

Ok, you can ignore all of my previous posts on this subject, I'm
going to plead jet lag and a serious head cold. :)
The reason you don't see TrustedInstaller listed as an account
is because it isn't one, it is a service. What you're seeing on
the DACL of the folders and files in question is part of the new
security in Vista that includes Service ACEs. Look for Windows
Service Hardening on the Vista web site for more details.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top