I have a problem that I can’t find an answer to, although I’m sure that it is there. Is there a way to disable the registry and file access for a newly created process? I use Job objects ( http://msdn.microsoft.com/en-us/library/windows/desktop/ms682409(v=vs.85).aspx ) and it says to set permissions for each new work process and in several books that I read that you can control files such as the registry and file access.
Looking for my answer, I saw that I needed to add a LUID for things like SE_BACKUP_NAME, etc. (or whatever it is called), but none of these privilege constants seem to reflect the type of control I want. question: how can I disable access to registry / file entries for a newly created process in Job?
I am trying to create a stand-alone application, by the way. This means that I can prevent him from making any changes to the registry or writing any files while working.
Any help would be appreciated!
source
share