| Author |
 Topic  |
|
|
JamesNT
Moderator
USA
3150 Posts
Status: offline |
 Posted - 06/03/2012 : 8:43:16 PM
|
I'd like to get a screenshot of the RED User Account Control Consent UI where Windows has blocked a program and you cannot run it.
What would be the best way to achieve this?
JamesNT
|
James Summerlin
www.jamessummerlin.com |
|
|
Douggg
Major Contributor
972 Posts
Status: offline |
Posted - 06/04/2012 : 01:20:50 AM
|
You would be able to do screen captures of VMs, so you could P2V it or you might be able to get it with an RDP session. If not the way I've been able to get shots is using KVM over IP through in a browser Window. If you have a ILO or DRAC connection you could do it that way too.
You would have to give this a try, but Camtasia might cpature it.
Hope that helps. |
 |
|
|
JamesNT
Moderator
USA
3150 Posts
Status: offline |
Posted - 06/04/2012 : 08:26:32 AM
|
Douggg,
Alright, I'm stupid. I completely FAILED to ask that question correctly and I apologize for that. I can take screenshots of the consent UI all day using Snagit as I've already gotten the first three by running Vista in a VMWare Workstation VM (the teal consent UI, grey, and yellow ones).
The RED consent UI is when you've blocked a program using group policy. The group policy part is what I need to know.
Apologies for all the confusion.
JamesNT |
James Summerlin
www.jamessummerlin.com |
|
|
|
Douggg
Major Contributor
972 Posts
Status: offline |
Posted - 06/04/2012 : 10:41:49 AM
|
| Not following you now. What' preventing you from taking the screenshot of the screen from the VM host or remote RDP machine? You can most certainly do it using KVM over IP. |
|
|
|
JamesNT
Moderator
USA
3150 Posts
Status: offline |
Posted - 06/04/2012 : 11:00:52 AM
|
Douggg,
I can indeed take all the screen shots I want. But I have no RED consent UI because I don't know the procedure in group policy to block a program to make a RED consent UI.
JamesNT |
James Summerlin
www.jamessummerlin.com |
|
|
|
JSCLMEDAVE
Administrator
USA
6116 Posts
Status: online |
Posted - 06/04/2012 : 11:03:26 AM
|
| James are you talking about SRP or App Locker Rules? |
Tim-
“This too shall pass" |
|
|
|
JamesNT
Moderator
USA
3150 Posts
Status: offline |
|
|
JamesNT
Moderator
USA
3150 Posts
Status: offline |
Posted - 06/04/2012 : 11:09:42 AM
|
There are, from what I've read in Mark's book, FOUR consent UI screens.
1. Teal colored and says "Windows needs your permission to continue". You get this one when a program built in to Windows and digitally signed by MS needs to do something Adminstrator-ish.
2. Grey colored and says "A program needs your permission to continue". You get this one when a program NOT built in to Windows but is digitally signed by its author needs to do something Administrator-ish.
3. Yellow colored and says "An Unknown program needs your permission to continue". You get this when a program not sigend by MS, not a part of Windows, and not signed by the author needs to do something Administrator-ish.
4. RED colored and says something like (I haven't seen it yet) "This program not allowed to run or blocked." You get this when a program's digital signature is blocked via Group Policy from running when it attempts to do something Administrator-ish.
I am getting this from page 83 of Mark Minasi's Administering Windows Vista Security: The BIG Surprises.
I already have screen shots of the first three. I need one of the fourth, I just don't know how to produce that consent UI.
JamesNT
|
James Summerlin
www.jamessummerlin.com |
|
|
|
JSCLMEDAVE
Administrator
USA
6116 Posts
Status: online |
|
|
JamesNT
Moderator
USA
3150 Posts
Status: offline |
Posted - 06/04/2012 : 11:33:47 AM
|
Why yes it does. The problem is the pic is to small.
JamesNT |
James Summerlin
www.jamessummerlin.com |
|
|
|
Douggg
Major Contributor
972 Posts
Status: offline |
Posted - 06/04/2012 : 11:38:18 AM
|
Now I get it.
Doug
|
|
|
| |
Topic |
|
RED Consent UI
