Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- UI Access allows accessible-level interaction from applications running different integrity levels while administrative application have access to system-level resources.
- UI Access is as insecure as an elevated process with the huge caveat that doesn't have access to system-level assets making harder to vertical level attacks to affect
- Is harder to an escalation of privileges
- https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/user-account-control-allow-uiaccess-applications-to-prompt-for-elevation-without-using-the-secure-desktop
- And the why is harder:
- https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/user-account-control-only-elevate-uiaccess-applications-that-are-installed-in-secure-locations
- The requirements are tailored to make it so, only applications installed AND with the proper configuration in the manifest (plus a verified signature) are able to bypass the UIPI
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement