获得更高的安全性特权 [英] Acquiring higher security privileges

问题描述

嗨.我正在开发.NET(C#)中的单击一次程序，该程序将在用户的PC上安装新的打印机，并在此过程中创建新的打印机端口.到目前为止，除Windows 7以外，我们都尝试过该程序.
Windows 7的问题是严格的默认安全设置.在默认设置下，用户无法通过添加打印机"向导创建新端口，这也适用于该程序.将安全性设置设置为最低选项时，两者都可以工作，但是我不想要求程序用户更改其安全性设置以使用我的程序.
也许有一种方法可以该程序可以要求用户特权来执行诸如创建新的打印机端口或在Program Files中创建新文件夹的操作(Windows 7也不允许这样做)?

谢谢，提前.

Hi. I am developing a click-once program in .NET (C#) that installs a new printer on the user's PC, creating a new printer port in the process.
This works perfectly in all the Windows operating systems on which I've tried the program so far, except for Windows 7.
The problem with Windows 7 is the strict default security setting. In the default setting, the user cannot create a new port via the Add Printer wizard, and this also applies to the program. When the security setting is set to the lowest option, both things work, but I would not like to require from the users of my program to change their security setting in order to use my program.
Is there perhaps a way that the program can request from the user the privilege to do things like creating a new printer port, or creating a new folder in Program Files (this is also not allowed by Windows 7)?

Thanks, in advance.

推荐答案

bghh:

     Windows 7和Windows Server 2008 R2的默认安全设置允许不是本地Administrators组成员的用户仅安装可信任的打印机驱动程序，例如Windows附带的或经过数字签名的打印机驱动程序.打印机驱动程序包.这有助于确保用户不要安装未经测试或不可靠的打印机驱动程序，或已被修改为包含恶意代码(恶意软件)的驱动程序.但是，这意味着有时用户无法为共享打印机安装适当的驱动程序，即使该驱动程序已在您的环境中经过测试和批准.有多种方法可以允许不是本地管理员组成员的用户连接到打印服务器并安装由该服务器托管的打印机驱动程序.您可能会发现以下参考很有帮助.

     控制打印机驱动程序安装安全性

Hi, bghh:

     The default security settings for Windows 7 and Windows Server 2008 R2 allow users who are not members of the local Administrators group to install only trustworthy printer drivers, such as those provided with Windows or in digitally signed printer-driver packages. This helps to ensure that users do not install untested or unreliable printer drivers or drivers that have been modified to contain malicious code (malware). However, it means that sometimes users cannot install the appropriate driver for a shared printer, even if the driver has been tested and approved in your environment.
     There're ways to allow users who are not members of the local Administrators group to connect to a print server and install printer drivers that are hosted by the server. You may find the following refs helpful.

     Control Printer Driver Installation Security

这篇关于获得更高的安全性特权的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！