Is there a way to launch processes with arbitrary MIC labels?

  • Thread starter Thread starter Walter Porter
  • Start date Start date
W

Walter Porter

Hello:

Is there a way to launch processes with arbitrary (or at least lower)
mandatory integrity control labels? For example, is there something like a
runas.exe command which can be used in a CMD shell running with the Medium
MIC label to launch a process with the Low MIC label? Is the only way to
launch a process with the Low MIC label is to hard code that label into the
assembly or PE?

Thanks!
 
Hello,

runas looks as if they are working in adding this feature. Check out:

runas /trustlevel
runas /showtrustlevels

In the mean time, I believe winternals has a tool that will allow you to do
this.
 
runas /trustlevel
runas /showtrustlevels
Click to expand...

I'm not sure, but I believe these are for Software Restriction Policies, not
MIC.
I believe winternals has a tool that will allow you to do this.
Click to expand...

Process Explorer can launch a program as a limited user, i.e., with most
privileges stripped and with a deny-only SID for the Administrators group in
the SAT, but I don't see a way for it to launch with arbitrary MIC labels
(unless it's a different tool you had in mind).

Thank you for the suggestions though!
 
Back
Top