Windows Vista for IT Professionals phần 3 pdf

Session 1: Security Enhancements in Windows Vista 13

• Applying a write-restricted access token to the service process. This access token can

be used in cases where the set of objects written to by the service is bounded and can

be configured. Write attempts to resources that do not explicitly grant the Service

SID access will fail.

• Controlling services by using network firewall policies, which prevents network

access outside the normal bounds of the service program. Service SIDs are linked

directly with the firewall policy.

14 Session 1: Security Enhancements in Windows Vista

Demonstration: Viewing Service Configuration

In this demonstration, you will see how you can:

• View the properties of the Dynamic Host Configuration Protocol (DHCP) Client

service.

• View the properties of the Workstation service.

Key Points

• Services in Windows Vista have been hardened to require lower privileges to reduce

the risk of a service being compromised.