Comments on: Bypassing SRP from PowerShell https://grey-panther.net/2009/07/bypassing-srp-from-powershell.html Just another WordPress site Fri, 23 Oct 2009 14:29:19 +0000 hourly 1 https://wordpress.org/?v=6.9 By: Cd-MaN https://grey-panther.net/2009/07/bypassing-srp-from-powershell.html#comment-237 Fri, 23 Oct 2009 14:29:19 +0000 https://grey-panther.net/?p=262#comment-237 According to the all knowning Wikipedia :-p, Windows 7 Professional comes indeed SRP, but not with AppLocker. AppLocker and SRP are two different technologies and they can work independent of each other.

]]> By: Anonymous https://grey-panther.net/2009/07/bypassing-srp-from-powershell.html#comment-238 Fri, 23 Oct 2009 06:34:05 +0000 https://grey-panther.net/?p=262#comment-238 Does Windows 7 Professional come with SRP support? Things I have read make it seem like only Ultimate comes with Applocker (I don't see how that is not a professional feature) but can you have SRP without Applocker?

]]> By: Cd-MaN https://grey-panther.net/2009/07/bypassing-srp-from-powershell.html#comment-335 Sun, 19 Jul 2009 09:48:19 +0000 https://grey-panther.net/?p=262#comment-335 Hmm, Russinovich is a smart guy with a very detailed knowledge of the Windows Kernel, so I should take a look at what he said. It is possible that AppLocker and SRP use two different mechanisms to enforce the policy.

]]> By: Anonymous https://grey-panther.net/2009/07/bypassing-srp-from-powershell.html#comment-338 Sun, 19 Jul 2009 09:16:25 +0000 https://grey-panther.net/?p=262#comment-338 Wow, so you made that real! Nice work! =) (Yes, I'm the same anonymous guy. I should think of a name to use. =D)

If that works in Windows 7, then I guess SRP still does not work in kernel mode in 7 and stays vulnerable to patching from user mode. The other day I read an article on Betanews [ http://www.betanews.com/article/Russinovich-rescues-the-TechEd-2009-keynote-with-Windows-7-AppLocker-demo/1242093669 ] about AppLocker in Windows 7 and it said "Think of it (AppLocker) as a firewall but at the kernel level." So I thought Windows 7 would have kernel level SRP/AppLocker but I guess not. Too bad! =(

]]>