0

I'm going to run highly dangerous executables in Windows XP residing inside virtual machine. Due to a large amount of dangerous executables, I can't restore VM to snapshot after every run of an executable. So I would like to run them via (job object and) CreateProcessWithLogon WinAPI (run from another user) to minimize a damage to VM.

How do I set up a user, such that executables running under his rights would have standard input/output (console) rights only or something near to that?

Improve this question

1 Answer 1

Reset to default
0

Use a guest account. That's the most restricted user that is built in

Improve this answer
2
  • Sometimes guest user can modify desktop, sometimes not. I've seen a couple of other differences in guest user privileges (though, these were high-level ones too). Could you provide some links on how to set such things up?
    – polkovnikov.ph
    Commented Oct 16, 2013 at 16:14
  • You'd have to check out Group Policies. Google has millions of hits about it
    – Canadian Luke
    Commented Dec 12, 2013 at 22:39

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .