Re:Windows OS Security
by AstralStorm on Thursday January 12, 2023 @08:53AM
(#34353458)
You need an elevated token to inject code into (well written) protected applications as well, and sometimes even that might not be enough.
Generally admins tend to be most worried about central databases or user visible services being compromised. Compromising an user account is a necessary step to get there, often enough.
Re:Windows OS Security
by noyoudumbdolt on Thursday January 12, 2023 @11:41AM
(#34356320)
>Compromising an user account is a necessary step to get there, often enough.
But whether you have an elevated token or not won’t make a difference in almost all cases.
Protecting local administrator tokens is also kind of a useless security feature these days. What are you worried about? Data theft? Ransomware? Trojans? Credentials theft? All of those can be done just fine with only standard user permissions, without an administrator token. OTOH, you need an elevated token to install device drivers or whatever.