I think you have misunderstood what the software does (and many others with them).
They eliminate the need of giving local admin privileges to the user and instead elevates specific processes (based on location, file owner, hash, signature etc) to have local admin rights for that specific process, not give local admin to everyone. You instead do a hook before LSA performs any kind of authentication verification and then add/remove security tokens as you see fit. This gives you a flexibility to, as an example, giving temporary rights for one specific .exe file and that file only instead of giving full system wide admin rights, thus minimizing the exposure and attack surface. Mvh Martin Gustafsson General Information From: Enterprise [mailto:enterprise-boun...@mozilla.org] On Behalf Of Tanstaafl Sent: den 17 maj 2018 12:38 To: enterprise@mozilla.org Subject: Re: [Mozilla Enterprise] FirefoxESR 60 and Windows 10 edition 1803 Problems installing. I'd never heard of Avecto Defendpoint, and after investigating, I see why. A tool apparently aimed at Admins/Entities that think they need to provide Local Admin privileges to all users - that can't properly interact with UAC? Sorry, but my advice is dump the useless tool. On Thu May 17 2018 05:44:29 GMT-0400 (Eastern Standard Time), William Spratt <william.spr...@fera.co.uk><mailto:william.spr...@fera.co.uk> wrote: Hi All, Bit of an odd one this. In Windows 10 (edition 1803) Firefox install okay on clean installs. After installing the Avecto Defendpoint client, it installs okay in Safe Mode. However... in normal mode, the installer unpacks the files, but then stops. The installer window doesn't open. Putting the ".exe" file into compatibility mode for 7 or 8 means the installer windows opens, you can select options, but then the progress bar hangs at about 10%. The cause is clearly Avecto Defendpoint Client. The install is being done with an Admin account, so the client shouldn't be getting involved at all. Firefox also installs without issue in previous editions of Windows 10 (with the client installed). Previous versions of Firefox have the same issue when trying to install in edition 1803 with the client active. Has anyone had any similar experiences? I'd like to whitelist the install files in the Avecto console to see if that resolves the issue. Where does the ".exe" upack the files to? The information contained in this e-mail message may be privileged, confidential, and protected from disclosure. Any unauthorized use, printing, copying, disclosure or dissemination of this communication may be subject to legal restriction or sanction. If you think that you have received this e-mail message in error, please reply to the sender and delete this message from your computer.
_______________________________________________ Enterprise mailing list Enterprise@mozilla.org https://mail.mozilla.org/listinfo/enterprise To unsubscribe from this list, please visit https://mail.mozilla.org/listinfo/enterprise or send an email to enterprise-requ...@mozilla.org with a subject of "unsubscribe"
