Security in Vista Business vs. Vista Ultimate

  • Thread starter Thread starter Jeff Lynch [MVP]
  • Start date Start date
J

Jeff Lynch [MVP]

Are the default security settings different in Vista Business than in Vista
Ultimate (both RTM)? I've noticed a special account called
"TrustedInstaller" in Vista Business that has full control permissions for
the system32 folder and files but this account doesn't seem to exist in
Vista Ultimate. I'm trying to install Outlook 2007 Business Contact Manager
under Vista Business and it fails due to a permissions error but it installs
just fine under Vista Ultimate.

Any help is greatly appreciated.
 
in the microsoft.public.windows.vista.security news group, Jeff
Lynch said:
Are the default security settings different in Vista Business than in Vista
Ultimate (both RTM)? I've noticed a special account called
"TrustedInstaller" in Vista Business that has full control permissions for
the system32 folder and files but this account doesn't seem to exist in
Vista Ultimate. I'm trying to install Outlook 2007 Business Contact Manager
under Vista Business and it fails due to a permissions error but it installs
just fine under Vista Ultimate.
Click to expand...

Jeff, are these both clean installs of RTM and not upgrade
installs of a previous release? My understanding is that the
TrustedInstaller is gone in the RTM versions of all Vista SKUs.
I've not installed Business yet but I know it is gone from
Ultimate and I know that I read somewhere recently that
TrustedInstaller is gone...

I'll try and throw Business up in a VM today and check.
 
the microsoft.public.windows.vista.security news group, Paul
Adare said:
in the microsoft.public.windows.vista.security news group, Jeff


Jeff, are these both clean installs of RTM and not upgrade
installs of a previous release? My understanding is that the
TrustedInstaller is gone in the RTM versions of all Vista SKUs.
I've not installed Business yet but I know it is gone from
Ultimate and I know that I read somewhere recently that
TrustedInstaller is gone...

I'll try and throw Business up in a VM today and check.
Click to expand...

Ok, so no TrustedInstaller in a clean install of Business
either.
 
the microsoft.public.windows.vista.security news group, Paul
Adare said:
the microsoft.public.windows.vista.security news group, Paul


Ok, so no TrustedInstaller in a clean install of Business
either.
Click to expand...

Hmm, but it does show up in the Windows folder DACL on both
Ultimate and Business. Weird. I'll see what I can dig up...
 
in the microsoft.public.windows.vista.security news group, Jeff
Lynch said:
Are the default security settings different in Vista Business than in Vista
Ultimate (both RTM)? I've noticed a special account called
"TrustedInstaller" in Vista Business that has full control permissions for
the system32 folder and files but this account doesn't seem to exist in
Vista Ultimate. I'm trying to install Outlook 2007 Business Contact Manager
under Vista Business and it fails due to a permissions error but it installs
just fine under Vista Ultimate.

Any help is greatly appreciated.
Click to expand...

Ok, you can ignore all of my previous posts on this subject, I'm
going to plead jet lag and a serious head cold. :-)
The reason you don't see TrustedInstaller listed as an account
is because it isn't one, it is a service. What you're seeing on
the DACL of the folders and files in question is part of the new
security in Vista that includes Service ACEs. Look for Windows
Service Hardening on the Vista web site for more details.
 
Back
Top