Security considerations in custom shell

[BONTZ]

Hi Everybody,

I am working on an application, running it as shell and its working fine
with no complications. I have created a user with least priviledges
(usergroup 4).

1. Now I am concerned about security a bit more. I read an articale about
using ACL to control access. I know what components to include(LSSAS, NTdll
and AuthZ) but I have no idea how to use those components actully to manage
Access Control Lists.

2. Being a customized shell, I have removed all welcome screen and splash
screen, but I can still see a blue screen(while auto logon is in process)
before my application starts. Can I change it to black ?

3. After using automatic login, "Ctrl+Alt+Del" is enabled. It was not there
by default. How can I disable this ?

Any help would be appreaciated.

[Slobodan Brcin (eMVP)]

Hi,

> 1. Now I am concerned about security a bit more. I read an articale about
> using ACL to control access. I know what components to include(LSSAS, NTdll
> and AuthZ) but I have no idea how to use those components actully to manage
> Access Control Lists.

calcs.exe or trough Win32 API.

> 2. Being a customized shell, I have removed all welcome screen and splash
> screen, but I can still see a blue screen(while auto logon is in process)
> before my application starts. Can I change it to black ?

Probably but I newer tried this. Try searching trough google groups:
http://groups.google.com/groups?hl=en&lr=&ie=UTF-8&oe=UTF-8&group=microsoft.public.windowsxp.embedded

> 3. After using automatic login, "Ctrl+Alt+Del" is enabled. It was not there
> by default. How can I disable this ?

1. Trough registry.
2. By removing Windows Task Manager component.
3. By modifying GINA sample.
http://groups.google.com/groups?hl=en&lr=&c2coff=1&q=GINA&meta=group%3Dmicrosoft.public.windowsxp.embedded.*

Regards,
Slobodan

[Roy Hodgkinson]

On question 2. To change the screen to black instead of blue during autologon:

[HKEY_USERS\.DEFAULT\Control Panel\Colors]
"Background"="0 0 0"

And, to eliminate the mouse cursor:

[HKEY_USERS\.DEFAULT\Control Panel\Cursors]
"Arrow"=hex(2):25,00,53,00,59,00,53,00,54,00,45,00,4d,00,52,00,4f,00,4f,00,54,\
00,25,00,5c,00,63,00,75,00,72,00,73,00,6f,00,72,00,73,00,5c,00,6e,00,75,00,\
6c,00,6c,00,2e,00,63,00,75,00,72,00,00,00

HTH, Roy

"Slobodan Brcin \(eMVP\)" <sbr...@ptt.yu> wrote in message news:<Oe9jHuNv...@TK2MSFTNGP09.phx.gbl>...